CVE-2023-1720— Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload

CVSS 9.6 · Critical EPSS 1.02% · P77 Updated Jan 25, 2025

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-1720

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload

Source: NVD (National Vulnerability Database)

Vulnerability Description

Lack of mime type response header in Bitrix24 22.0.300 allows authenticated remote attackers to execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via uploading a crafted HTML file through /desktop_app/file.ajax.php?action=uploadfile.

Source: NVD (National Vulnerability Database)

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Source: NVD (National Vulnerability Database)

Vulnerability Type

危险类型文件的不加限制上传

Source: NVD (National Vulnerability Database)

Vulnerability Title

Bitrix24 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Bitrix24是美国Bitrix公司的一套企业社交平台。该平台包括在线通讯、日历管理和CRM（客户关系管理）等功能。 Bitrix24 22.0.300版本存在安全漏洞，该漏洞源于缺少mime类型的响应头，导致攻击者可以在受害者的浏览器中执行任意JavaScript代码。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Bitrix24	Bitrix24	0 ~ 22.0.300	-

II. Public POCs for CVE-2023-1720

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2023-1720

请登录查看更多情报信息。

https://starlabs.sg/advisories/23/23-1720/third-party-advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-1720

Same Patch Batch · Bitrix24 · 2023-11-01 · 8 CVEs total

CVE-2023-1717	9.6 CRITICAL	Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype Pollution
CVE-2023-1716	9.0 CRITICAL	Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Ed
CVE-2023-1715	9.0 CRITICAL	Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Ed
CVE-2023-1714	8.8 HIGH	Bitrix24 Remote Command Execution (RCE) via Unsafe Variable Extraction
CVE-2023-1713	8.8 HIGH	Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File Creation
CVE-2023-1719	7.5 HIGH	Bitrix24 Insecure Global Variable Extraction
CVE-2023-1718	7.5 HIGH	Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access

IV. Related Vulnerabilities

Same product: Bitrix24

Same vendor: Bitrix24

Same weakness: CWE-434

V. Comments for CVE-2023-1720

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2023-1720— Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload

I. Basic Information for CVE-2023-1720

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2023-1720

III. Intelligence Information for CVE-2023-1720

Same Patch Batch · Bitrix24 · 2023-11-01 · 8 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2023-1720

Leave a comment