---
id: CVE-2025-62429
title: ClipBucket v5 is an open source video sharing platform
summary: >-
  ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2
  #147, ClipBucket v5 is vulnerable to arbitrary PHP code execution. In
  /upload/admin_area/actions/update_launch.php, the "type" parameter from a POST
  request i…
severity: high
cvss: 7.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-94
vendor: oxygenz
product: clipbucket
affected:
  - 'clipbucket >= 5.3, < 5.5.2-147'
patched:
  - clipbucket 5.5.2-147
published: '2025-10-20'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T22:10:00.563'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-62429'
references:
  - url: >-
      https://github.com/MacWarrior/clipbucket-v5/commit/e81bac602c871bb1ad971884003a3a496a2ab50b
    label: security-advisories@github.com
  - url: 'https://github.com/MacWarrior/clipbucket-v5/releases/tag/5.5.2-%23147'
    label: security-advisories@github.com
  - url: >-
      https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-3x4g-x3gv-rjmq
    label: security-advisories@github.com
  - url: >-
      https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-3x4g-x3gv-rjmq
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - exploit-available
epss: 0.00845
epssPercentile: 0.56719
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/drkim-dev/CVE-2025-62429'
  checkedAt: '2026-10-08T22:12:30.010Z'
exploitAvailable: true
ingestedAt: '2026-10-08T22:11:53.818Z'
---

## Overview

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 #147, ClipBucket v5 is vulnerable to arbitrary PHP code execution. In /upload/admin_area/actions/update_launch.php, the "type" parameter from a POST request is embedded into PHP tags and executed. Proper sanitization is not performed, and by injecting malicious code an attacker can execute arbitrary PHP code. This allows an attacker to achieve RCE. This issue has been resolved in version 5.5.2 #147.

## Affected

- `clipbucket >= 5.3, < 5.5.2-147`

## Remediation

Upgrade past the affected range:

- `clipbucket 5.5.2-147`