Security Advisory

CVE-2020-13483

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-06-24 14:33:28

Last updated 2024-08-04 12:18:18

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the items[ITEMS][ID] parameter to the components/bitrix/mobileapp.list/ajax.php/ URI.

← Browse all CVEs View on cve.org ↗