CVE-2025-21623: Oxygenz Clipbucket

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 238, ClipBucket V5 allows unauthenticated attackers to change the template directory via a directory traversal, which results in a denial of service.

Affected products

• Oxygenz Clipbucket: from 5.3, before 5.5.1-238 (fixed in 5.5.1-238)

Published 2025-01-07. Last modified 2026-06-17.