Vulnerability: CVE-2022-27228.
Publication date: March 21, 2022.
Description:
Insufficient validation of user input allows a remote unauthenticated attacker to execute arbitrary code on a system. It can result in gaining control of the target system.
Solution:
Update the "Polls, Votes" (vote) module to 21.0.100 version.
Additional information:
We express our gratitude to Sergey Bliznyuk (Positive Technologies) for his help in finding the vulnerability.
Vulnerability: CVE-2022-27228
Was this information helpful?
Integration specialist assistance
Get your Bitrix24 set up by local professionals
Don't have an account? Create for free
Related articles
MCP in Bitrix24 Cancel subscription Cookie processing Working with Open Channel chats Automation rules and triggers in Bitrix24 Scrum Wiki overview Filter deal report in Google Looker Studio Blend data sources in Google Looker Studio reports Contact Center Automation rules and triggers in e-Signature for HR: Document signing Recently viewed articles
Create a list in a workgroup or project