| Package | Affected versions | Patched versions |
|---|---|---|
| bitrix framework | = 20.0 |
An issue was discovered in Bitrix24 Bitrix Framework (1c site management) 20.0. An "User enumeration and Improper Restriction of Excessive Authentication Attempts" vulnerability exists in the admin login form, allowing a remote user to enumerate users in the administrator group. This also allows brute-force attacks on the passwords of users not in the administrator group.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free