cve/2023/CVE-2023-1718.md

### [CVE-2023-1718](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1718)
![](https://img.shields.io/static/v1?label=Product&message=Bitrix24&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%3D%2022.0.300%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-835%20Loop%20with%20Unreachable%20Exit%20Condition%20('Infinite%20Loop')&color=brighgreen)

### Description

Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted "tmp_url".

### POC

#### Reference
- https://starlabs.sg/advisories/23/23-1718/

#### Github
- https://github.com/jhonnybonny/Bitrix24DoS
- https://github.com/nomi-sec/PoC-in-GitHub