Bitrix24 has a new interface. The images in the articles might differ from the current account design. We will update them soon.

Vulnerability: CVE-2022-27228

Author: Emily Walker

Last update: March 21, 2022.

Vulnerability: CVE-2022-27228.
Publication date: March 21, 2022.

Description:
Insufficient validation of user input allows a remote unauthenticated attacker to execute arbitrary code on a system. It can result in gaining control of the target system.

Solution:
Update the "Polls, Votes" (vote) module to 21.0.100 version.

Additional information:
We express our gratitude to Sergey Bliznyuk (Positive Technologies) for his help in finding the vulnerability.

Was this information helpful?

Integration specialist assistance

That's not what I'm looking for

Complicated and incomprehensible text

The information is outdated

It's too short. I need more information

I don't like the way this tool works

Get your Bitrix24 set up by local professionals

FIND BITRIX24 PARTNER NEAR ME

Go to Bitrix24

Don't have an account? Create for free

Quick access page bar in Bitrix24 Invite Bitrix24 Partner Emoji in Bitrix24 Custom fields in RPA Reports in CRM Configure fields in Kanban form view Create an appreciation message in Feed Work with documents using Google Docs Work reports Automation rules and triggers in tasks

Bitrix24 Helpdesk

Vulnerability: CVE-2022-27228