CVE-2020-13484

creationtimestamp| type| source ---|---|--- 2020-07-16 10:00:46+00:00| published-proof-of-concept| https://t.me/misteam/169...

CVE-2020-13484

Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview url parameter, if the destination URL hosts an HTML document containing 'meta name="og:image" content="' followed by an intranet URL...