PT-2020-13567

Name of the Vulnerable Software and Affected Versions Bitrix24 versions prior to 20.0.976 Description The issue allows for Server-Side Request Forgery SSRF via an intranet IP address in the "services/main/ajax.php?action=attachUrlPreview" API endpoint, specifically through the url parameter. This...