Vulnerability · Published Nov 1, 2023 · Assigned by STAR_Labs

CVE-2023-1719Bitrix24 Insecure Global Variable Extraction

High 7.5

In plain English

A high-severity security flaw in Bitrix24 from Bitrix24. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 6.3% (higher than 94% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)6.3%top 6.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Nuclei

Official description

Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate attachments on the server and (2) execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via overwriting uninitialised variables.

Affected products (as reported)

Vendor	Product	Versions
Bitrix24	Bitrix24	0 – through 22.0.300

Weakness: CWE-665 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://starlabs.sg/advisories/23/23-1719/ third-party-advisory