CVE-2023-1720

🗓️ 01 Nov 2023 09:04:46Reported by STAR_LabsType

cve🔗 web.nvd.nist.gov👁 65 Views🌐 WEB

Lack of mime type response header in Bitrix24 22.0.300 allows attackers to execute arbitrary code

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-1720	6 Nov 202316:50	–	circl
CNNVD	Bitrix24 Security Vulnerability	1 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-1720 Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload	1 Nov 202309:04	–	cvelist
EUVD	EUVD-2023-23943	3 Oct 202520:07	–	euvd
NVD	CVE-2023-1720	1 Nov 202310:15	–	nvd
Prion	Design/Logic Flaw	1 Nov 202310:15	–	prion
Positive Technologies	PT-2023-6688 · Bitrix · Bitrix24	1 Nov 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-1720	23 May 202502:33	–	redhatcve
Vulnrichment	CVE-2023-1720 Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload	1 Nov 202309:04	–	vulnrichment

NVD

Node

bitrix24 bitrix24Match22.0.300

[
  {
    "defaultStatus": "unaffected",
    "product": "Bitrix24",
    "programFiles": [
      "file:desktop_app/file.ajax.php"
    ],
    "vendor": "Bitrix24",
    "versions": [
      {
        "lessThanOrEqual": "22.0.300",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
starlabs	www.starlabs.sg/advisories/23/23-1720/

Parameter	Position	Path	Description	CWE
file	binary	desktop_app/file.ajax.php?action=uploadfile	Authenticated remote attacker can upload a crafted HTML file via the upload endpoint, enabling execution of arbitrary JavaScript in the victim's browser and potentially PHP on the server.	CWE-434

21 Nov 2024 07:39Current

8.4High risk

Vulners AI Score8.4

CVSS 3.18 - 9.6

EPSS0.01018

SSVC

CWE-434