CVE-2024-34883: BITRIX24

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to read proxy-server accounts passwords via HTTP GET request.

Affected products

• BITRIX24 BITRIX24: version 23.300.100 only

Published 2024-11-04. Last modified 2026-07-05.