MacWarrior clipbucket-v5 up to 5.5.2#161 HTTP Header network.class.php Host password recovery

Summaryinfo

A vulnerability was found in MacWarrior clipbucket-v5 up to 5.5.2#161. It has been classified as problematic. Affected is an unknown function of the file network.class.php of the component HTTP Header Handler. This manipulation of the argument Host causes password recovery. The identification of this vulnerability is CVE-2025-62709. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in MacWarrior clipbucket-v5 up to 5.5.2#161. It has been declared as problematic. Affected by this vulnerability is an unknown code block of the file network.class.php of the component HTTP Header Handler. The manipulation of the argument Host with an unknown input leads to a password recovery vulnerability. The CWE definition for the vulnerability is CWE-640. The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

ClipBucket v5 is an open source video sharing platform. In ClipBucket version 5.5.2, a change to network.class.php causes the application to dynamically build the server URL from the incoming HTTP Host header when the configuration base_url is not set. Because Host is a client-controlled header, an attacker can supply an arbitrary Host value. This allows an attacker to cause password-reset links (sent by forget.php) to be generated with the attacker’s domain. If a victim follows that link and enters their activation code on the attacker-controlled domain, the attacker can capture the code and use it to reset the victim’s password and take over the account. This issue has been patched in version 5.5.2#162.

It is possible to read the advisory at github.com. This vulnerability is known as CVE-2025-62709 since 10/20/2025. The exploitation appears to be difficult. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1552 according to MITRE ATT&CK.

By approaching the search of inurl:network.class.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 5.5.2#162 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-198296). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• MacWarrior

Name

• clipbucket-v5

Version

• 5.5.2#161

Website

• Product: https://github.com/MacWarrior/clipbucket-v5/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion