Threats tagged 'ghsa-5vrm-rpx8-j2p7'

ClipBucket v5 before version 5.5.3-#197 has a path traversal vulnerability in its admin template editor. Authenticated administrators with manage_template_access permission can exploit this flaw by supplying directory traversal sequences in the folder parameter. This allows them to overwrite PHP files outside the intended layout directory, potentially leading to remote code execution as the web server user.