Lucene search

CitrixCTX583759

HistoryJan 16, 2024 - 1:08 p.m.

Citrix StoreFront Security Bulletin for CVE-2023-5914

2024-01-1613:08:20

support.citrix.com

citrix storefront

cross-site scripting

vulnerability

cve-2023-5914

ltsr

current release

software

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

43.5%

JSON

A vulnerability has been discovered in Citrix StoreFront, which, if exploited, may result in a Cross-site scripting (XSS) attack.

Affected Versions:

The following supported versions of Citrix StoreFront are affected by the vulnerability:

Current Release (CR)

Citrix StoreFront before 2308.1
Citrix StoreFront before 2311

Long Term Service Release (LTSR)

Citrix StoreFront 1912 LTSR before CU8 hotfix 3.22.8001.2
Citrix StoreFront 2203 LTSR before CU4 Update 1

Summary:

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

43.5%

JSON

Related for CTX583759