Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an arbitrary server via HTTP POST request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bitrix24 安全漏洞
Vulnerability Description
Bitrix24是美国Bitrix公司的一套企业社交平台。该平台包括在线通讯、日历管理和CRM（客户关系管理）等功能。 Bitrix24 23.300.100版本存在安全漏洞，该漏洞源于远程管理员通过 HTTP POST 请求可以将 SMTP 帐户密码发送到任意服务器。
CVSS Information
N/A
Vulnerability Type
N/A