Lucene search
HistoryNov 01, 2023 - 10:15 a.m.
CVE-2023-1718
improper file access
bitrix24
denial-of-service
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
42.9%
Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted “tmp_url”.
Affected configurations
Node
bitrix24bitrix24Match22.0.300
References
Related
cve
cve
CVE-2023-1718
2023-11-01 10:15:09
prion
prion
Input validation
2023-11-01 10:15:00
vulnrichment
vulnrichment
githubexploit
githubexploit
Exploit for Infinite Loop in Bitrix24
2023-11-08 07:45:54
cvelist
cvelist
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
42.9%
Related for NVD:CVE-2023-1718