CVE-2022-27228

PoC —

CVSS 3.1

9.8 critical

EPSS

21%p97

Published

Mar 22, 2022 (Mar 22, 2022)

Modified

Jun 17, 2026

Description

In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code.

Vendors: bitrix24
Products: bitrix24
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (20.8%)

In the news1 stories

ExCobalt Cybercrime group targets Russian organizations in multiple sectors

Security AffairsJun 24, 07:39 UTC · Jun 24, 2024Data breach CVE-2022-2586 CVE-2021-3156 CVE-2021-4034+6 CVEs

60