Security Advisory
CVE-2020-13484
9.8
CRITICAL
Vulnerability Description
Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview url parameter, if the destination URL hosts an HTML document containing '
Published Date
June 24, 2020
Official Source
NIST NVD Advisory