← All advisories

Critical severity9.8NVD Advisory· Published Mar 22, 2022· Updated Jun 17, 2026

CVE-2022-27228

CVE-2022-27228

Description

In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code.

Affected products

3

Bitrix/Bitrix24
cpe:2.3:a:bitrix24:bitrix24:*:*:*:*:*:*:*:*
Range: <21.0.100
Bitrix/Bitrix Site Managercpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <21.0.100

Patches

Vulnerability mechanics

References

1

helpdesk.bitrix24.com/open/15536776/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.