CVE-2023-1718
Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted “tmp_url”. Zafiyet ile […]
İçeriği inceleyinALLSAFE / Güncel Güvenlik Açıkları
Güvenlik Açıkları
NIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
CVE-2023-1719
Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate attachments on the server and (2) execute […]
İçeriği inceleyinCVE-2023-1720
Lack of mime type response header in Bitrix24 22.0.300 allows authenticated remote attackers to execute arbitrary JavaScript code in the victim’s browser, […]
İçeriği inceleyinCVE-2022-48454
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local […]
İçeriği inceleyinCVE-2022-48455
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local […]
İçeriği inceleyinCVE-2022-48456
In camera driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local […]
İçeriği inceleyinCVE-2022-48457
In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with […]
İçeriği inceleyinCVE-2022-48458
In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with […]
İçeriği inceleyinCVE-2022-48459
In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with […]
İçeriği inceleyinCVE-2022-48460
In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local denial of service […]
İçeriği inceleyinCVE-2022-48461
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local […]
İçeriği inceleyinCVE-2023-1713
Insecure temporary file creation in bitrix/modules/crm/lib/order/import/instagram.php in Bitrix24 22.0.300 hosted on Apache HTTP Server allows remote authenticated attackers to execute arbitrary code […]
İçeriği inceleyin