The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the itemsITEMSID parameter to the components/bitrix/mobileapp.list/ajax.php/ URI...
6.1CVSS5.8AI score0.04511EPSS
SaveExploits1
CVE•added 2020/06/24 2:33 p.m.•159 views
CVE-2020-13483
CVE-2020-13483 : Bitrix24 Web Application Firewall (WAF)
