Bitrix Site Management 2.x - Open Redirect
Bitrix Site Management 2.x contains an open redirect vulnerability allowing attackers to redirect users to arbitrary external sites via crafted redirect parameters. References: https://packetstormsecurity.com/files/151955/1C-Bitrix-Site-Management-Russia-2.0-Open-Redirection.html https://holisticinfosec.blogspot.com/2008/07/bitrix-open-redirect-vulnerability.html https://nvd.nist.gov/vuln/detail/CVE-2008-2052 Remediation: Upgrade Bitrix to a patched version and validate redirect targets against an allowlist.
Used 2.2k times · domain, subdomain, ipv4