📦 Bitrix24

by Bitrix24

🔍 What is Bitrix24?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2024-34891

MEDIUM CVSS 6.8 Nov 4, 2024

This vulnerability allows remote administrators to read Exchange account passwords stored in DAV server settings via HTTP GET requests. It affects Bitrix24 installations running version 23.300.100. Th...

CVE-2024-34882

MEDIUM CVSS 4.9 Nov 4, 2024

This vulnerability allows remote administrators in Bitrix24 to send SMTP account passwords to arbitrary external servers via HTTP POST requests due to insufficient credential protection. It affects Bi...

CVE-2024-34887

MEDIUM CVSS 4.9 Nov 4, 2024

This vulnerability allows remote administrators in Bitrix24 to exfiltrate AD/LDAP administrator account passwords to arbitrary external servers via HTTP POST requests. It affects Bitrix24 installation...