CVE-2023-1718 | BDVDB-2026-215710 Detail
Bitrix24Bitrix24
Description#
Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted "tmp_url".
Impact#
CAPEC-545 Pull Data from System Resources
Weaknesses#
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.