How severe is CVE-2023-1718?

CVE-2023-1718 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2023-1718 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 24% (98th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2023-1718?

CVE-2023-1718 affects Bitrix24. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2023-1718?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2023-1718 published?

CVE-2023-1718 was published on 2023-11-01 and last updated on 2026-06-17.

CVE-2023-1718

CVE-2023-1718 is a high-severity vulnerability in Bitrix24 with a CVSS 3.x base score of 7.5. Its EPSS exploit-prediction score of 24% places it in the 98th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-835.

Key facts

Severity: High (CVSS 3.x base score 7.5)
EPSS exploit prediction: 24% (98th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-835
Affected product: Bitrix24
Published: 2023-11-01
Last modified: 2026-06-17

Description

Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted "tmp_url".

Frequently asked questions

What is CVE-2023-1718?: Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted "tmp_url".
How severe is CVE-2023-1718?: CVE-2023-1718 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2023-1718 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 24% (98th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2023-1718?: CVE-2023-1718 affects Bitrix24. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2023-1718?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2023-1718 published?: CVE-2023-1718 was published on 2023-11-01 and last updated on 2026-06-17.

References

https://starlabs.sg/advisories/23/23-1718/

Affected products (1)

cpe:2.3:a:bitrix24:bitrix24:22.0.300:*:*:*:*:*:*:*

More vulnerabilities in Bitrix24

CVE-2022-27228 — Critical (CVSS 9.8): In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can…
CVE-2020-13484 — Critical (CVSS 9.8): Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview…
CVE-2023-1720 — Critical (CVSS 9.6): Lack of mime type response header in Bitrix24 22.0.300 allows authenticated remote attackers to execute arbitrary…
CVE-2023-1717 — Critical (CVSS 9.6): Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300…
CVE-2023-1716 — Critical (CVSS 9.0): Cross-site scripting (XSS) vulnerability in Invoice Edit Page in Bitrix24 22.0.300 allows attackers to execute…
CVE-2023-1715 — Critical (CVSS 9.0): A logic error when using mb_strpos() to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass…

All CVEs affecting Bitrix24 →

Other CWE-835 (Loop with Unreachable Exit Condition (Infinite Loop)) vulnerabilities

CVE-2026-24816 — Critical (CVSS 10.0): Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in datavane tis…
CVE-2018-20784 — Critical (CVSS 9.8): In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a…
CVE-2017-12997 — Critical (CVSS 9.8): The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in…
CVE-2017-12995 — Critical (CVSS 9.8): The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().
CVE-2017-12990 — Critical (CVSS 9.8): The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.
CVE-2026-31448 — Critical (CVSS 9.4): In the Linux kernel, the following vulnerability has been resolved: ext4: avoid infinite loops caused by residual…

Browse all CWE-835 (Loop with Unreachable Exit Condition (Infinite Loop)) vulnerabilities →