CVE-2023-1714

Published: 2023-11-01T10:15Z

Last Modified: 2024-11-21T07:39Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Unsafe variable extraction in bitrix/modules/main/classes/general/user_options.php in Bitrix24 22.0.300 allows remote authenticated attackers to execute arbitrary code via (1) appending arbitrary content to existing PHP files or (2) PHAR deserialization. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt