CVE-2023-1715 (published 2023-11-01T09:03:05.343Z)

A logic error when using mb_strpos() to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass XSS sanitisation via placing HTML tags at the begining of the payload.






Affected products: Vendor: Bitrix24
Product: Bitrix24
Versions: 0