| Package | Affected versions | Patched versions |
|---|---|---|
| bitrix24 | = 22.0.300 |
Unsafe variable extraction in bitrix/modules/main/classes/general/user_options.php in Bitrix24 22.0.300 allows remote authenticated attackers to execute arbitrary code via (1) appending arbitrary content to existing PHP files or (2) PHAR deserialization.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free