<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: bitrix24</title><description>Every new CVE for bitrix24.</description><link>https://agentprime.io/</link><item><title>CVE-2023-1720: Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload</title><link>https://agentprime.io/advisories/CVE-2023-1720/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-1720/</guid><description>CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Nov 2023 09:04:46 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-1719: Bitrix24 Insecure Global Variable Extraction</title><link>https://agentprime.io/advisories/CVE-2023-1719/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-1719/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Nov 2023 09:04:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-1718: Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access</title><link>https://agentprime.io/advisories/CVE-2023-1718/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-1718/</guid><description>CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.29 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Nov 2023 09:04:03 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-1717: Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype Pollution</title><link>https://agentprime.io/advisories/CVE-2023-1717/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-1717/</guid><description>CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Nov 2023 09:03:46 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-1716: Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (2 of 2)</title><link>https://agentprime.io/advisories/CVE-2023-1716/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-1716/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Nov 2023 09:03:24 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-1715: Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (1 of 2)</title><link>https://agentprime.io/advisories/CVE-2023-1715/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-1715/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Nov 2023 09:03:05 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-1714: Bitrix24 Remote Command Execution (RCE) via Unsafe Variable Extraction</title><link>https://agentprime.io/advisories/CVE-2023-1714/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-1714/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Nov 2023 09:02:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-1713: Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File Creation</title><link>https://agentprime.io/advisories/CVE-2023-1713/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-1713/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Nov 2023 09:02:18 GMT</pubDate><category>CVE</category></item></channel></rss>