High severity8.8NVD Advisory· Published Nov 5, 2020· Updated Jun 17, 2026

CVE-2020-13661

Description

Telerik Fiddler through 5.0.20202.18177 allows attackers to execute arbitrary programs via a hostname with a trailing space character, followed by --utility-and-browser --utility-cmd-prefix= and the pathname of a locally installed program. The victim must interactively choose the Open On Browser option. Fixed in version 5.0.20204.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Telerik/Fiddler2 versions
cpe:2.3:a:telerik:fiddler:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:telerik:fiddler:*:*:*:*:*:*:*:*range: <=5.0.20202.18177
- (no CPE)range: <=5.0.20202.18177

Patches

Vulnerability mechanics

References

www.telerik.com/support/whats-new/fiddler/release-history/fiddler-v5.0.20204nvdRelease NotesVendor Advisory
www.telerik.com/support/whats-new/release-historynvdRelease NotesVendor Advisory
www.nagenrauft-consulting.com/blog/nvdNot Applicable

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000