CVE-2023-24488

🗓️ 10 Jul 2023 20:41:31Reported by CitrixType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 767 Views

Cross site scripting vulnerability in Citrix ADC and Citrix Gateway allows attacker to perform cross site scripting

Reporter	Title	Published	Views	Family All 18
GithubExploit	Exploit for Cross-site Scripting in Citrix Gateway	4 Jul 202318:02	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Citrix Gateway	1 Jul 202317:47	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Citrix Gateway	31 Jul 202311:29	–	githubexploit
Circl	CVE-2023-24488	1 Jul 202317:36	–	circl
Tenable Nessus	Citrix ADC and Citrix Gateway Multiple Vulnerabilities (CTX477714)	11 May 202300:00	–	nessus
Tenable Nessus	Citrix Gateway / ADC Cross-Site Scripting	13 Jul 202300:00	–	nessus
CNNVD	Citrix Systems Citrix Gateway和Citrix ADC 跨站脚本漏洞	10 Jul 202300:00	–	cnnvd
Citrix	Citrix ADC and Citrix Gateway Security Bulletin for CVE-2023-24487, CVE-2023-24488	9 May 202313:26	–	citrix
Citrix	Netscaler CVE & Security Guide	14 Jul 202400:00	–	citrix
Cvelist	CVE-2023-24488 Cross site scripting	10 Jul 202320:41	–	cvelist

NVD

Node

citrix gatewayRange12.1–12.1-65.35

citrix gatewayRange13.0–13.0-90.11

citrix gatewayRange13.1–13.1-45.61

Node

citrix application_delivery_controllerRange12.1–12.1-55.296fips

citrix application_delivery_controllerRange12.1–12.1-55.296ndcpp

citrix application_delivery_controllerRange12.1–12.1-65.35-

citrix application_delivery_controllerRange13.0–13.0-90.11

citrix application_delivery_controllerRange13.1–13.1-45.61

[
  {
    "defaultStatus": "unaffected",
    "product": "Citrix ADC and Citrix Gateway ",
    "vendor": "Citrix",
    "versions": [
      {
        "lessThan": "13.1-45.61 ",
        "status": "affected",
        "version": "13.1",
        "versionType": "patch"
      },
      {
        "lessThan": "13.0-90.11 ",
        "status": "affected",
        "version": "13.0",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-65.35",
        "status": "affected",
        "version": "12.1",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-55.296",
        "status": "affected",
        "version": "12.1-FIPS ",
        "versionType": "patch"
      },
      {
        "lessThan": "13.1-37.150 ",
        "status": "affected",
        "version": "13.1-FIPS ",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-55.296",
        "status": "affected",
        "version": "12.1-NDcPP",
        "versionType": "patch"
      }
    ]
  }
]

Source	Link
support	www.support.citrix.com/article/CTX477714/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202324487-cve202324488

21 Nov 2024 07:47Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.1

EPSS0.91357

SSVC