| Package | Affected versions | Patched versions |
|---|---|---|
| bitrix24 | = 23.300.100 |
Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an arbitrary server via HTTP POST request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free