CVE-2020-11883

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

Performance Counter corruption causes StoreFront installation to fail with "An Unexpected Error occurred. Contact Citrix Technical support"

When this occurs you see the message “An Unexpected Error occurred. Contact Citrix Technical support”. This following entry appears in the StoreFront log files described in https://docs.citrix.com/en-us/storefront/current-release/troubleshoot.html: System.InvalidOperationException: The installati...

Storefront install error 0x00000643 when upgrading to 7.15 CU3

Error upgrading Storefront 7.15 CU2 to CU3. Error in log Failed to install component 'StoreFront'. 'CitrixStoreFront-x64.exe' component failed to install with error 0x00000643...

When Launching Published Applications via Citrix Storefront Receiving Error "Cannot connect to server, Please check your network and try again."

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After Storefront branding customization, users that are accessing applications from the receiver are...

StoreFront 3.13 - Propagation fails An error occurred running the command: Add-DSFeatureInstances

Both StoreFront servers are Server 2012R2 fresh install and fully updated. Clean install of SF 3.13 completed successfully on both servers. Log Name: Citrix Delivery Services Source: Citrix Configuration Replication Service Level : Error Description : An error occurred running the command:...

CVE-2014-5516

Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...

CVE-2014-5516

Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...

CVE-2014-5516

KonaKart Storefront Application (DS Data Systems) prior to 7.3.0.0 is vulnerable to CSRF protection bypass that allows an attacker to hijack an administrator’s session by issuing a manipulated GET request to change a user email address. The issue is documented in CVE-2014-5516, with a remediation...

How to use StoreFront Multi-Site Aggregation to configure high availability

This article focuses on configuringhigh availability using StoreFront's Multi-Site Aggregation feature in case of standalone Virtual Apps and Desktops sites with identical published apps. This is not a disaster recovery solution however, it can be used as an alternative and it will be helpful in...

Storefront: Issue with creating new deployment - "Unable to Create Deployment"

1. Unable to create StoreFront Deployment on a VM hosted on VMware with VMware tools installed Exception: New Server Deployment An error occurred running the command: 'Set-DSNewClusterEnvironment' An error occurred while adding the StoreFront configuration API. Exception of type...

Citrix StoreFront Server XML External Entity Injection (CVE-2019-13608)

An XML external entity injection vulnerability exists in Citrix StoreFront Server. A successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...

CVE-2019-8108

Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can manipulate session validation setting for a storefront that leads to insecure authentication and session management...

How To Customize The Window Title Of Native Citrix Receiver Authentication Dialogs

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. All native Citrix Receiver authentication dialogs have title “Citrix Receiver” thus: This article...

Citrix StoreFront Server 7.15 - XML External Entity Injection

Citrix StoreFront Server 7.15 - XML External Entity Injection Exploit Title: Citrix StoreFront Server 7.15 - XML External Entity Injection Date: 2019-08-28 Exploit Author: Vahagn Vardanya Vendor Homepage:https://www.citrix.com/downloads/storefront/ Software Link:...

Citrix StoreFront Server 7.15 XML Injection

Exploit Title: Citrix StoreFront Server 7.15 - XML External Entity Injection Date: 2019-08-28 Exploit Author: Vahagn Vardanya Vendor Homepage:https://www.citrix.com/downloads/storefront/ Software Link: https://support.citrix.com/article/CTX251988 Version: Citrix StoreFront Server earlier than 190...

Citrix StoreFront Server 7.15 - XML External Entity Injection Vulnerability

Exploit for xml platform in category web applications Exploit Title: Citrix StoreFront Server 7.15 - XML External Entity Injection Exploit Author: Vahagn Vardanya Vendor Homepage:https://www.citrix.com/downloads/storefront/ Software Link: https://support.citrix.com/article/CTX251988 Version: Citr...

Citrix StoreFront Server 7.15 - XML External Entity Injection

Exploit Title: Citrix StoreFront Server 7.15 - XML External Entity Injection Date: 2019-08-28 Exploit Author: Vahagn Vardanya Vendor Homepage:https://www.citrix.com/downloads/storefront/ Software Link: https://support.citrix.com/article/CTX251988 Version: Citrix StoreFront Server earlier than 190...

Configuring SAML Authentication from StoreFront to NetScaler

This article is to step through configuring SAML Authentication between StoreFront as the Service Provider SP and NetScaler as the Identity Provider IdP...

Shopify: StoreFront API allows for a brute force attack on customer login by not timing out ALL attempts

It seems that the service used for login purposes could be brute forced. the system fails when the password is incorrect, after some unsuccessful attempts the following message is shown: "data":"customerAccessTokenCreate":null,"errors":"message":"Login attempt limit exceeded. Please try again...