Lucene search

CitrixCTX583759

HistoryJan 16, 2024 - 1:08 p.m.

Citrix StoreFront Security Bulletin for CVE-2023-5914

2024-01-1613:08:20

support.citrix.com

citrix storefront

cross-site scripting

vulnerability

cve-2023-5914

ltsr

current release

software

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.3%

JSON

A vulnerability has been discovered in Citrix StoreFront, which, if exploited, may result in a Cross-site scripting (XSS) attack.

Affected Versions:

The following supported versions of Citrix StoreFront are affected by the vulnerability:

Current Release (CR)

Citrix StoreFront before 2308.1
Citrix StoreFront before 2311

Long Term Service Release (LTSR)

Citrix StoreFront 1912 LTSR before CU8 hotfix 3.22.8001.2
Citrix StoreFront 2203 LTSR before CU4 Update 1

Summary:

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.3%

JSON

Related for CTX583759