Citrix Devices Under Attack: NetScaler Flaw Exploited to Capture User Credentials

🗓️ 10 Oct 2023 05:52:00Reported by The Hacker NewsType

Citrix NetScaler ADC and Gateway devices vulnerability exploited by threat actors to capture user credentials [CVE-2023-3519]. Attack involves malicious script insertion, PHP-based web shell, and JavaScript data collection from modified login pages.

Reporter	Title	Published	Views	Family All 100
0day.today	Citrix ADC (NetScaler) Remote Code Execution Exploit	8 Aug 202300:00	–	zdt
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	21 Jul 202322:10	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	31 Aug 202309:10	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	21 Jul 202320:17	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	27 Oct 202318:39	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	24 Aug 202312:24	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	6 Aug 202323:17	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	20 Jul 202316:05	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	21 Jul 202311:02	–	githubexploit
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	20 Jul 202313:16	–	githubexploit

10 Oct 2023 05:52Current

8.5High risk

Vulners AI Score8.5

CVSS 3.19.8

CVSS 210

EPSS0.9972

SSVC