CVE-2023-3294

Cross-site Scripting XSS - DOM in GitHub repository saleor/react-storefront prior to c29aab226f07ca980cc19787dcef101e11b83ef7...

CVE-2023-3294 Cross-site Scripting (XSS) - DOM in saleor/react-storefront

Cross-site Scripting XSS - DOM in GitHub repository saleor/react-storefront prior to c29aab226f07ca980cc19787dcef101e11b83ef7...

Smart Card logon fails with error "You cannot log on using a smart card"

Cannot logon to Storefront web site using smart card. Error received: "You cannot log on using a smart card". Test.aspx page fails indicating this is a MS issue mapping client certificates to IIS...

Explanation of Citrix Storefront Default Appliance

Explain default appliance gateway usage for Storefront store...

Storefront 2302 CU2 - All Apps are now showing on initial landing page instead of categories view

After upgrading Storefront servers from 7.15 to 2302 CU2, user's now see all apps on the landing page rather than a category view...

Citrix StoreFront Server XXE (CTX477616)

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

Store Creation Fails with "Set-DSNewClusterEnvironment" privilege related errors

The below error occured when the user is creating new stores on the Storefront server: Citrix.DeliveryServices.PowerShell.Command.RunnerInterfaces.Exceptions.PowerShellExecutionException: An error occurred running the command: 'Set-DSNewClusterEnvironment' Not possible to enable all the required...

How to Add Hypertext on Storefront Web Page

...

How to set Http redirect to HTTPS directly on Storefront server

When user access Storefront site web with http://sfurl.com/citrix/storeweb , it can be auto redirected intohttps://sfurl.com/citrix/storeweb...

StoreFront - Unable to import configuration

Unable to import StoreFront configuration from existing environment into a newly installed Storefront server with no stores created...

Storefront - Storefront URL becomes inaccessible after adding HTTP Response Header

After mitigating the HTTP Security Header Not Detected Vulnerability in IIS by adding HTTP Response Headers, the Citrix Storefront url may become inaccessible. Users might be presented with the "500 Internal server error" message...

SAML authentication fails with PingFed IdP with error "There was a failure with the mapped account"

Users get the error: "There was a failure with the mapped account" when attempt to login to StoreFront URL after configuring SAML authentication on the StoreFront server with PingFed IdP When checked the Citrix Delivery Services event logs from SF, we see below error: The security token failed...

CWA HTML5 shows incorrect version

After upgrading CWA HTML5 from v2101 to any later versionsE.g. v2309 in the storefront server, the About dialog still shows the old version. The Storefront Console however still shows the correct version...

How to disable StoreFront's http communication

How to disable StoreFront's http communication...

CWA displaying apps differently depending on which Storefront server you connect to

When connecting to a new Storefront server, customer is seeing icons that are displayed differently then they do when connecting to another Storefront server running the same version. Connected to the 1st server, the apps looked like this: Connected to the 2nd server, the apps looked like this:...

Cannot complete request when accessing HTTPS Storefront URL

When users access the storefront webpage they get an error saying "cannot complete request" on the detect workspace app / receiver web page...

How to hide Storefront store from NetScaler Gateway

This article address a workaround to hide multiple stores' choice when adding account via NetScaler Gateway in Workspace at the fist time...

Cannot join Server Group - Error occurred running the command: Start-DSClusterJoinService

When trying to add Storefront server to existing group, getting error: When checking event viewer logs on Storefront server, we see: An error occurred running the command: 'Start-DSClusterJoinService' Exception of type...

Citrix Storefront Installed (Windows)

Binary data citrixstorefrontwininstalled.nbin...

Mars: Bug Report #23JAN135 (subdomain takeover via shopify )

The researcher discovered a subdomain takeover vulnerability affecting ██████████, which was pointing to an unclaimed Shopify instance. The researcher successfully demonstrated the takeover by claiming the subdomain and setting up a proof-of-concept storefront...