CVE-2022-27509

Unauthenticated redirection to a malicious website...

CVE-2022-27509

Unauthenticated redirection to a malicious website...

CVE-2022-27509

CVE-2022-27509 describes an unauthenticated redirect vulnerability in Citrix ADC and Citrix Gateway. A victim user clicking an attacker-crafted link can be redirected to a malicious website due to insufficient data authenticity verification (CWE-345). Affected appliance versions include Citrix AD...

CVE-2022-27509 Unauthenticated redirection to a malicious website

Unauthenticated redirection to a malicious website...

Citrix ADC and Citrix Gateway 12.1.x < 12.1-65.15 / 13.0.x < 13.0-86.17 / 13.1.x < 13.1-24.38 Unauthenticated Redirection (CTX457836)

The remote Citrix ADC or Citrix Gateway device is version 12.1.x prior to 12.1-65.15, 13.0.x prior to 13.0-86.17 or 13.1.x prior to 13.1-24.38. It may be, therefore, affected by a vulnerability that allows an attacker to redirect the user to a malicious website upon clicking an attacker-crafted...

Citrix ADC and Citrix Gateway Security Bulletin for CVE-2022-27509

A vulnerability has been discovered in Citrix ADC and Citrix Gateway which enables an attacker to create a specially crafted URL that redirects to a malicious website. This vulnerability has the following identifier: CVE-ID| Description| CWE| Pre-conditions ---|---|---|--- CVE-2022-27509|...