Skip to content
OpenAdvisories

Vendor

Bitrix24

8 known vulnerabilities.

Products

Bitrix24 8
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-1718 Public exploit EPSS 29%

    Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access

    Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted "tmp_url".

    Bitrix24 Bitrix24