by Kastro
Paper/Archive/CVE-2023-1717

CVE-2023-1717

Bitrix24 Bitrix24 — Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype Pollution

EPSS 1%public exploitCVSS 9.6
critical.is priorityof 100
52
CVSS 9.6 (CNA, NVD agree)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 64.3.643 × 2012.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300 allows remote attackers to execute arbitrary JavaScript code in the victim’s browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via polluting `__proto__[tag]` and `__proto__[text]`.

Affected

ProductAffectedFixed inSource
Bitrix24≤ 22.0.300–CNA

Scores by source

NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
STAR_Labs (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

writeupstarlabs.sg/advisories/23/23-1717