CVE-2020-17496criticalunder attackCWE-74

CVE-2020-17496

Published · Updated

Follow this CVE+ Monitor vBulletin

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 87%
from disclosure to weapon8 days
Published on NVDAug 12
1st PoC+8d
metasploitAug 9
CISA KEV+448d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

vBulletin versions 5.5.4 to 5.6.2 contain a critical flaw that allows attackers to execute arbitrary commands on the server by sending specially crafted requests. This is a serious vulnerability because it gives attackers complete control over the affected website.

Technical detail

The vulnerability exists in the ajax/render/widget_tabbedcontainer_tab_panel endpoint where unsanitized subWidgets data is processed, allowing unauthenticated remote command execution. This issue represents an incomplete remediation of CVE-2019-16759, enabling attackers to bypass the previous patch through alternative input vectors and achieve arbitrary code execution on the server.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.