Vulnerability: CVE-2022-27228.
Publication date: March 21, 2022.
Description:
Insufficient validation of user input allows a remote unauthenticated attacker to execute arbitrary code on a system. It can result in gaining control of the target system.
Solution:
Update the "Polls, Votes" (vote) module to 21.0.100 version.
Additional information:
We express our gratitude to Sergey Bliznyuk (Positive Technologies) for his help in finding the vulnerability.
Vulnerability: CVE-2022-27228
Was this information helpful?
Integration specialist assistance
Related articles
Insert Value Form Transfer the dismissed user's email address Twilio integration: Create an account and connect it to Bitrix24 What to provide to Support when Bitrix24 isn't working Blend data on deals and employees in Looker Studio Group actions with tasks Connect an Instagram account to Sales Intelligence Work with collab tasks Site access permissions Add other users' calendars