CVE-2023-1719 Scanner
CVE-2023-1719 scanner - Cross-Site Scripting vulnerability in Bitrix24
url
CVE
CVE-2023-1719
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate attachments on the server and (2) execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via overwriting uninitialised variables.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
bitrix24
Updated Nov 10, 2026View on NVD →
S4E scanner
CVE history: bitrix24
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →