CVE-2026-100372 in ClipBucket
Resumen
por MITRE • 2026-09-25
ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with manage_template_access permission can traverse outside the layout directory to modify executable PHP files and achieve remote code execution as the web server user.
Once again VulDB remains the best source for vulnerability data.