ClipBucket V5 Directory Traversal Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in ClipBucket V5 versions prior to 5.5.1 - 238. The issue allows unauthenticated attackers to disrupt the application by exploiting a directory traversal flaw to change the template directory. This manipulation causes the application to become unresponsive and unusable.

Impact

Exploitation of this vulnerability causes a complete denial-of-service condition, rendering the ClipBucket application unusable.

Reproduction

To reproduce this vulnerability, send a request to '404.php' with a crafted 'template' parameter that exploits the directory traversal vulnerability, pointing to a valid but unintended directory, such as '/tmp'. Include the 'set_template' parameter to trigger the template change. This can be done using a web browser or a tool like curl.

Remediation

Update to ClipBucket version 5.5.1 - 238 or later.