Security Advisory

CVE-2020-17496

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-08-12 13:07:58

Last updated 2025-10-21 23:35:38

Assigner mitre

State PUBLISHED

Description

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759.

← Browse all CVEs View on cve.org ↗