CVE-2017-17672 In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certain circumstances, code execution, because of unsafe usage of...
CriticalCVSS 9.8
EPSS 15.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certain circumstances, code execution, because of unsafe usage of PHP's unserialize() in vB_Library_Template's cacheTemplates() function, which is a publicly exposed API. This is exploited with the templateidlist parameter to ajax/api/template/cacheTemplates.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vbulletin | >= 5.0.1, <= 5.3.3 | No fix listed |
| vbulletin | = 5.0.0-beta_11 | No fix listed |
| vbulletin | = 5.0.0-beta_28 | No fix listed |
References
- blogs.securiteam.com exploit third-party-advisory
- 43362 exploit third-party-advisory vdb-entry