Unscored CVE-2020-13484 EUVD-2020-5734GHSA-7p89-xjg8-39jf

Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview url parameter, if th…

Published Jun 24, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview url parameter, if the destination URL hosts an HTML document containing '<meta name="og:image" content="' followed by an intranet URL.

References

https://gist.github.com/mariuszpoplwski/f261a4bc06adde5c78760559db9d63bd