CVE-2017-17672 EXPLOIT
9.8
CRITICAL · CVSS 3.0 · EPSS 15.2% (pctl 97)
Patch early
A public exploit exists.
Description
In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certain circumstances, code execution, because of unsafe usage of PHP's unserialize() in vB_Library_Template's cacheTemplates() function, which is a publicly exposed API. This is exploited with the templateidlist parameter to ajax/api/template/cacheTemplates.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 15.19% — more likely to be exploited than 97% of all CVEs |
| Weakness | CWE-502 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2017-12-14 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| vbulletin | vbulletin |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | vBulletin 5.x - 'cacheTemplates' Remote Arbitrary File Deletion | 2017-12-13 |
References
→ the Explorer · watch your stack · NVD