CVE-2023-3519

🗓️ 19 Jul 2023 17:51:39Reported by CitrixType

cve🔗 web.nvd.nist.gov📰️ 30 Media mentions👁 1745 Views🌐 WEB

Unauthenticated remote code execution, CVE-2023-351

Reporter	Title	Published	Views	Family All 67
0day.today	Citrix ADC (NetScaler) Remote Code Execution Exploit	8 Aug 202300:00	–	zdt
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	21 Jul 202322:10	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	31 Aug 202309:10	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	21 Jul 202320:17	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	27 Oct 202318:39	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	24 Aug 202312:24	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	6 Aug 202323:17	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	20 Jul 202316:05	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	21 Jul 202311:02	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	20 Jul 202313:16	–	githubexploit

NVD

Node

citrix netscaler_application_delivery_controllerRange12.1–12.1-55.297fips

citrix netscaler_application_delivery_controllerRange12.1–12.1-55.297ndcpp

citrix netscaler_application_delivery_controllerRange13.0–13.0-91.13-

citrix netscaler_application_delivery_controllerRange13.1–13.1-37.159fips

citrix netscaler_application_delivery_controllerRange13.1–13.1-49.13-

citrix netscaler_gatewayRange13.0–13.0-91.13

citrix netscaler_gatewayRange13.1–13.1-49.13

[
  {
    "defaultStatus": "unaffected",
    "product": "NetScaler ADC",
    "vendor": "Citrix",
    "versions": [
      {
        "lessThan": "49.13",
        "status": "affected",
        "version": "13.1",
        "versionType": "patch"
      },
      {
        "lessThan": "91.13",
        "status": "affected",
        "version": "13.0",
        "versionType": "patch"
      },
      {
        "lessThan": "37.159",
        "status": "affected",
        "version": "13.1-FIPS",
        "versionType": "patch"
      },
      {
        "lessThan": "55.297",
        "status": "affected",
        "version": "12.1-FIPS",
        "versionType": "patch"
      },
      {
        "lessThan": "55.297",
        "status": "affected",
        "version": "12.1-NDcPP",
        "versionType": "patch"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NetScaler Gateway",
    "vendor": "Citrix",
    "versions": [
      {
        "lessThan": "49.13",
        "status": "affected",
        "version": "13.1",
        "versionType": "patch"
      },
      {
        "lessThan": "91.13",
        "status": "affected",
        "version": "13.0",
        "versionType": "patch"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/173997/Citrix-ADC-NetScaler-Remote-Code-Execution.html
support	www.support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
event	query param	gwtest/formssso	FormSSO endpoint vulnerable to crafted target payload leading to RCE in affected Citrix ADC devices	CWE-94
target	query param	gwtest/formssso	FormSSO endpoint vulnerable to crafted target payload leading to RCE in affected Citrix ADC devices	CWE-94

17 Jun 2026 06:14Current

10High risk

Vulners AI Score10

CVSS 3.19.8

EPSS0.99343

SSVC