← Database

CVE-2023-1718

HIGH CVSS: 7.5 Published: 2023-11-01 Modified: 2026-06-17

Description

Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted "tmp_url".

Affected Platforms

Bitrix24 Bitrix24

Weakness Type

CWE-835, CWE-835

References