https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:31:05.774065+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07461 bdu:2023-07461 2026-10-04T21:31:05.858668+00:00 bdu:2023-07461 https://cve.radiocsirt.org/vuln/euvd-2026-161710 EUVD-2026-161710 2026-10-04T21:31:05.858711+00:00 EUVD-2026-161710 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1717 fkie_cve-2023-1717 2026-10-04T21:31:05.858727+00:00

Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300 allows remote attackers to execute arbitrary JavaScript code in the victim’s browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via polluting `__proto__[tag]` and `__proto__[text]`.

 https://cve.radiocsirt.org/vuln/ghsa-5vm6-5fwc-4g9h GHSA-5vm6-5fwc-4g9h 2026-10-04T21:31:05.858762+00:00

Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300 allows remote attackers to execute arbitrary JavaScript code in the victim’s browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via polluting `__proto__[tag]` and `__proto__[text]`.

 https://cve.radiocsirt.org/vuln/gsd-2023-1717 gsd-2023-1717 2026-10-04T21:31:05.858781+00:00 gsd-2023-1717