critical9.8
CVE-2022-27228
In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code.
Impact
In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bitrix24 | Bitrix24 | before 21.0.100 |