← All credits
Lam Jun Rong & Li Jiantao of STAR Labs SG Pte. Ltd. (@starlabs_sg)
8 vulnerability records and advisories credit this contributor.
CVE-2023-1713
Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File Creation
CVE-2023-1714
Bitrix24 Remote Command Execution (RCE) via Unsafe Variable Extraction
CVE-2023-1715
Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (1 of 2)
CVE-2023-1716
Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (2 of 2)
CVE-2023-1717
Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype Pollution
CVE-2023-1718
Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access
CVE-2023-1719
Bitrix24 Insecure Global Variable Extraction
CVE-2023-1720
Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload