CVE-2025-21622 | MacWarrior clipbucket-v5 up to 5.5.1-236 Avatar Upload avatar_url path traversal

A vulnerability has been found in MacWarrior clipbucket-v5 up to 5.5.1-236 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Avatar Upload Handler. The manipulation of the argument avatar_url leads to path traversal.

This vulnerability is known as CVE-2025-21622. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.