Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-47238 EUVD-2026-36369

ClipBucket: IDOR in videos subtitle editor

Published Jun 11, 2026 · Updated Jun 13, 2026 · Assigned by GitHub_M

Description

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #133, a normal authenticated user can edit another user's video subtitles because of a lack of authorization. They can upload subtitles, edit their name or delete them. This issue has been patched in version 5.5.3 - #133.

Affected products

VendorProductAffectedFixed
MacWarrior clipbucket-v5 < 5.5.3 - #133 —

References