Storefront 3.12 - SAML authentication is not working.when using IDP like Forge Rock

Storefront 3.12 - SAML authentication is not working with IDP like Forge Rock. Error Message on Store Front Page Error Message: "There was a Failure with mapped account." Following Error message is thrown in the Event Viewer The security token failed validation...

StoreFront - Citrix Subscriptions Store service not starting up on one storefront server in server group

When launching a published application an error message israndomly seen . "Your apps are not available at this time. Please try again in a few minutes or contact your help desk with this information: Cannot contact Storefront" The issue is caused by subscription service store service not starting...

Shopify: Self XSS in Timeline

Copy the url javascript: XSS payload to any Timeline, then click url will trigger XSS. F796167 F796161 I previously reported a storefront url XSS at 841361, then admin copy the url to Timeline is possibly. Impact Self XSS...

CVE-2020-11883

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

CVE-2020-11883

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

Code injection

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

CVE-2020-11883

The CVE-2020-11883 entry concerns Divante Vue Storefront API (Divante vue-storefront-api up to v1.11.1) and storefront-api (up to v1.0-rc.1) used in VueStorefront PWA. The issue is an information-disclosure/stack-trace exposure: unexpected HTTP requests trigger an exception that reveals internal ...

CVE-2020-11883

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

CVE-2020-11883: Generation of Error Message Containing Sensitive Information

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

Performance Counter corruption causes StoreFront installation to fail with "An Unexpected Error occurred. Contact Citrix Technical support"

When this occurs you see the message “An Unexpected Error occurred. Contact Citrix Technical support”. This following entry appears in the StoreFront log files described in https://docs.citrix.com/en-us/storefront/current-release/troubleshoot.html: System.InvalidOperationException: The installati...

Storefront install error 0x00000643 when upgrading to 7.15 CU3

Error upgrading Storefront 7.15 CU2 to CU3. Error in log Failed to install component 'StoreFront'. 'CitrixStoreFront-x64.exe' component failed to install with error 0x00000643...

When Launching Published Applications via Citrix Storefront Receiving Error "Cannot connect to server, Please check your network and try again."

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After Storefront branding customization, users that are accessing applications from the receiver are...

StoreFront 3.13 - Propagation fails An error occurred running the command: Add-DSFeatureInstances

Both StoreFront servers are Server 2012R2 fresh install and fully updated. Clean install of SF 3.13 completed successfully on both servers. Log Name: Citrix Delivery Services Source: Citrix Configuration Replication Service Level : Error Description : An error occurred running the command:...

CVE-2014-5516

Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...

CVE-2014-5516

KonaKart Storefront Application (DS Data Systems) prior to 7.3.0.0 is vulnerable to CSRF protection bypass that allows an attacker to hijack an administrator’s session by issuing a manipulated GET request to change a user email address. The issue is documented in CVE-2014-5516, with a remediation...

CVE-2014-5516

Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...

CVE-2014-5516: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...

How to use StoreFront Multi-Site Aggregation to configure high availability

This article focuses on configuringhigh availability using StoreFront's Multi-Site Aggregation feature in case of standalone Virtual Apps and Desktops sites with identical published apps. This is not a disaster recovery solution however, it can be used as an alternative and it will be helpful in...

Storefront: Issue with creating new deployment - "Unable to Create Deployment"

1. Unable to create StoreFront Deployment on a VM hosted on VMware with VMware tools installed Exception: New Server Deployment An error occurred running the command: 'Set-DSNewClusterEnvironment' An error occurred while adding the StoreFront configuration API. Exception of type...