Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-1718

Published: 01/11/2023 Updated: 09/11/2023
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0
Subscribe to Bitrix24

Vulnerability Summary

Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote malicious users to cause denial-of-service via a crafted "tmp_url".

Vulnerable Product Search on Vulmon Subscribe to Product

bitrix24 bitrix24 22.0.300

Github Repositories

https://github.com/jhonnybonny/Bitrix24DoS

This Python script is designed to exploit a security vulnerability in Bitrix24, leading to a Denial of Service (DoS) attack. The vulnerability, identified as CVE-2023-1718, allows an attacker to disrupt the normal operation of a Bitrix24 instance.

Bitrix24 DoS Exploit This repository contains a Python script designed to exploit a Denial of Service (DoS) vulnerability in Bitrix24 Please note that this script is for educational purposes only, and its use for unauthorized activities is illegal and unethical CVE-2023-1718 CVE Identifier: CVE-2023-1718 Vulnerability Type: Denial of Service (DoS) Target System: Bitrix24 Us

References

CWE-835https://starlabs.sg/advisories/23/23-1718/https://nvd.nist.govhttps://github.com/jhonnybonny/Bitrix24DoS
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook