Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 18:48:17 +0000 bdu:2023-07461 https://cve.radiocsirt.org/vuln/bdu:2023-07461 bdu:2023-07461 https://cve.radiocsirt.org/vuln/bdu:2023-07461 EUVD-2026-161710 https://cve.radiocsirt.org/vuln/euvd-2026-161710 EUVD-2026-161710 https://cve.radiocsirt.org/vuln/euvd-2026-161710 fkie_cve-2023-1717 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1717 <p>Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300 allows remote attackers to execute arbitrary JavaScript code in the victim’s browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via polluting `__proto__[tag]` and `__proto__[text]`.</p> <p>Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300 allows remote attackers to execute arbitrary JavaScript code in the victim’s browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via polluting `__proto__[tag]` and `__proto__[text]`.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-1717 GHSA-5vm6-5fwc-4g9h https://cve.radiocsirt.org/vuln/ghsa-5vm6-5fwc-4g9h <p>Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300 allows remote attackers to execute arbitrary JavaScript code in the victim’s browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via polluting `__proto__[tag]` and `__proto__[text]`.</p> <p>Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300 allows remote attackers to execute arbitrary JavaScript code in the victim’s browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via polluting `__proto__[tag]` and `__proto__[text]`.</p> https://cve.radiocsirt.org/vuln/ghsa-5vm6-5fwc-4g9h gsd-2023-1717 https://cve.radiocsirt.org/vuln/gsd-2023-1717 gsd-2023-1717 https://cve.radiocsirt.org/vuln/gsd-2023-1717