CVE-2023-1713 (published 2023-11-01T09:02:18.019Z)
Insecure temporary file creation in bitrix/modules/crm/lib/order/import/instagram.php in Bitrix24 22.0.300 hosted on Apache HTTP Server allows remote authenticated attackers to execute arbitrary code via uploading a crafted ".htaccess" file.
Affected products: Vendor: Bitrix24
Product: Bitrix24
Versions: 0