s2
--:--:--UTC

Searching APEX

Starting…

  1. Searching Threats, IOCs & Threat Intelligence locally
  2. Querying external providers
  3. Asking AI Forensic Validator
  4. Creating new entry from validated hit

0s elapsed

CVE-2023-1719

📛 CVE Title

Bitrix24 Insecure Global Variable Extraction

Description

Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate attachments on the server and (2) execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via overwriting uninitialised variables.

Overview

State
PUBLISHED
Assigner (CNA)
STAR_Labs
CVSS severity
HIGH
CVSS score
CVSS 7.5 / 10 7.5 7.5 / 10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Effective score
7.5 / 10 HIGH source: CNA overview
CWE(s)
CWE-665
Reserved
2023-03-30
Published
2023-11-01 10:04 UTC
Last updated
2024-09-05 21:43 UTC
Source
https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/1xxx/CVE-2023-1719.json
Linked Threat
CVE-2023-1719 — Bitrix24 Insecure Global Variable Extraction

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID
EUVD-2023-23942
Assigner
STAR_Labs
Published
Nov 1, 2023, 9:04:19 AM
Updated
Sep 5, 2024, 7:43:24 PM
EUVD base score (CVSS 3.1)
7.5 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EUVD-reported EPSS
86.1300
Vendors
Bitrix24
Products
Bitrix24 (0 ≤22.0.300)
Aliases
GHSA-cvvq-2x6w-g26j

ENISA description: Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate attachments on the server and (2) execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via overwriting uninitialised variables.

EUVD references (1)

Affected products (1)

VendorProductVersionsPlatforms
Bitrix24 Bitrix24 0 (affected)

Vendor references (1)

References embedded in the original CVE record by the assigning CNA.

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

Indicators (1)

IOCs linked to the auto-promoted Threat row.

TypeValueVirusTotalAttached
domain tools.php no local data 2026-05-18 21:20 UTC

Flagged vendors

    Remediations (17)

    Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

    • web:github.com

      The game was originally designed for consoles and limits subtitle size above 720p, making text harder to read on 1080p or higher. This fix removes that limit so subtitles scale correctly with your resolution. If you want a different size, you can fine-tune it with FontScalingFactor in MadnessPatch.ini.

      2026-06-03 02:59 UTC
    • web:krebsonsecurity.com

      Microsoft Corp. today issued security updates to fix more than 80 vulnerabilities in its Windows operating systems and software. There are no known "zero-day" or actively exploited ...

      2026-06-03 02:59 UTC
    • web:nvd.nist.gov

      The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, product names, and impact metrics. For ...

      2026-06-03 02:59 UTC
    • web:portal.msrc.microsoft.com

      The Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides the information here as part of the ongoing effort to help you manage security risks and help keep your systems protected.

      2026-06-03 02:59 UTC
    • web:discussions.unity.com

      👉 If you have any questions, join us in the CVE Discussions forums and use the CVE Q&A Topic. 👈 This page allows you access the patch for your games and apps. It will be updated as needed. Watch this topic via the bell icon to receive notifications when updates become available. Patching Tool Update: New builds are now available. See below for latest (and older) builds Patcher Version 1. ...

      2026-06-03 02:59 UTC
    • web:sqlserverupdates.com

      What are the most recent updates for SQL Server? Here are the most recent service packs and cumulative updates for SQL Server, and here's how to patch your server: Version Latest Update Build Number Support Ends Other Updates SSMS 22 Download Most Recent SSMS 17 w/Debugger SQL Server 2025 Download RTM then CU5 17.0.4045.5 2036/01/06...

      2026-06-03 02:59 UTC
    • web:blog.qualys.com

      Key Takeaways RedSun is a critical zero-day vulnerability in Microsoft Defender that allows low-privileged users to gain SYSTEM access No patch is currently available, leaving all Defender-enabled Windows systems potentially exposed Qualys VMDR detects affected assets instantly (QID 92382) TruRisk™ Eliminate enables immediate mitigation , removing exploitability without waiting for a fix ...

      2026-06-03 02:59 UTC
    • web:www.maketecheasier.com

      Check out the latest Windows 11 and Windows 10 update problems and their solutions, as recommended by Microsoft experts.

      2026-05-22 05:40 UTC
    • web:www.notebookcheck.net

      Microsoft confirmed that its April 2026 security updates, including KB5082063 and KB5083769, are triggering BitLocker recovery prompts on some Windows Server 2025, Windows 11, and Windows 10 devices.

      2026-05-22 05:40 UTC
    • web:www.oracle.com

      This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.

      2026-05-22 05:40 UTC
    • web:www.securityweek.com

      Microsoft has announced mitigations for CVE -2026-45585, a BitLocker bypass triggered via FsTx in Windows Recovery.

      2026-05-22 05:40 UTC
    • web:blog.qualys.com

      Microsoft's February 2026 Patch Tuesday focuses on closing security gaps that attackers could exploit, reinforcing the importance of timely patching in enterprise environments. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for February 2026 This month's release addresses 61 vulnerabilities, including five critical and 52 important-severity vulnerabilities. In ...

      2026-05-22 05:40 UTC
    • web:cybersecuritynews.com

      No patch has been released yet; Microsoft has instead issued a multi-step manual mitigation guide while a formal security update is prepared. Windows BitLocker Security Bypass The vulnerability originates in WinRE's handling of the BootExecute registry value under HKLM\ControlSet001\Control\Session Manager.

      2026-05-22 05:40 UTC
    • web:portal.msrc.microsoft.com

      The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

      2026-05-22 05:40 UTC
    • web:www.bleepingcomputer.com

      Today is Microsoft's March 2026 Patch Tuesday with security updates for 79 flaws, including 2 publicly disclosed zero-day vulnerabilities.

      2026-05-22 05:40 UTC
    • web:www.forbes.com

      Microsoft starts expiring critical Secure Boot certificates in just 2 weeks.

      2026-05-22 05:40 UTC
    • web:www.helpnetsecurity.com

      Microsoft is working on a fix for CVE -2026-45585 (aka "Yellowkey"), a vulnerability that can be used to bypass Windows' BitLocker protection.

      2026-05-22 05:40 UTC

    AI Forensic Analysis

    Only Available for Registered Users. Sign in to view.

    Raw JSON

    The full cvelistV5 record. Download as CVE-2023-1719.json.

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T05:57:25.191Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "third-party-advisory",
                  "x_transferred"
                ],
                "url": "https://starlabs.sg/advisories/23/23-1719/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-1719",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-09-05T19:42:42.941584Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-09-05T19:43:24.735Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Bitrix24",
              "programFiles": [
                "file:bitrix/modules/main/tools.php"
              ],
              "vendor": "Bitrix24",
              "versions": [
                {
                  "lessThanOrEqual": "22.0.300",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "user": "00000000-0000-4000-9000-000000000000",
              "value": "Lam Jun Rong & Li Jiantao of STAR Labs SG Pte. Ltd. (@starlabs_sg)"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate attachments on the server and (2) execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via overwriting uninitialised variables."
                }
              ],
              "value": "Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate attachments on the server and (2) execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via overwriting uninitialised variables."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-591",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-591 Reflected XSS"
                }
              ]
            },
            {
              "capecId": "CAPEC-77",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-77 Manipulating User-Controlled Variables"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-665",
                  "description": "CWE-665 Improper Initialization",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-11-01T09:04:19.695Z",
            "orgId": "b1571b85-cbc9-431f-830b-0c8155323a69",
            "shortName": "STAR_Labs"
          },
          "references": [
            {
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://starlabs.sg/advisories/23/23-1719/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Bitrix24 Insecure Global Variable Extraction",
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "b1571b85-cbc9-431f-830b-0c8155323a69",
        "assignerShortName": "STAR_Labs",
        "cveId": "CVE-2023-1719",
        "datePublished": "2023-11-01T09:04:19.695Z",
        "dateReserved": "2023-03-30T09:19:45.104Z",
        "dateUpdated": "2024-09-05T19:43:24.735Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }