Lucene search
STAR_LabsCVELIST:CVE-2023-1718HistoryNov 01, 2023 - 9:04 a.m.
CVE-2023-1718 Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access
2023-11-0109:04:03
CWE-835
STAR_Labs
www.cve.org
4
cve-2023-1718
bitrix24
denial-of-service
improper file stream access
unauthenticated remote attackers
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
42.9%
Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted “tmp_url”.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Bitrix24",
"programFiles": [
"file:desktop_app/file.ajax.php"
],
"vendor": "Bitrix24",
"versions": [
{
"lessThanOrEqual": "22.0.300",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]References
Related
cve
cve
CVE-2023-1718
2023-11-01 10:15:09
prion
prion
Input validation
2023-11-01 10:15:00
vulnrichment
vulnrichment
nvd
nvd
CVE-2023-1718
2023-11-01 10:15:09
githubexploit
githubexploit
Exploit for Infinite Loop in Bitrix24
2023-11-08 07:45:54
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
42.9%
Related for CVELIST:CVE-2023-1718