{"uuid": "26a42a3f-23d2-404e-ad78-58581ca33020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1714", "type": "seen", "source": "https://t.me/arpsyndicate/701", "content": "#ExploitObserverAlert\n\nCVE-2023-1714\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-1714. Unsafe variable extraction in bitrix/modules/main/classes/general/user_options.php in Bitrix24 22.0.300 allows remote authenticated attackers to execute arbitrary code via (1) appending arbitrary content to existing PHP files or (2) PHAR deserialization.\n\nFIRST-EPSS: 0.001120000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-11-29T08:33:42.000000Z"}