Lucene search

CitrixCVE-2023-5914

HistoryJan 17, 2024 - 9:15 p.m.

CVE-2023-5914

2024-01-1721:15:11

CWE-79

Citrix

web.nvd.nist.gov

112

cve-2023-5914

xss

nvd

security

vulnerability

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

43.5%

JSON

Cross-site scripting (XSS)

Affected configurations

Nvd

Node

cloudcitrix_storefrontRange<1912ltsr

cloudcitrix_storefrontRange<2308.1

cloudcitrix_storefrontMatch1912-ltsr

VendorProductVersionCPE
cloudcitrix_storefront*cpe:2.3:a:cloud:citrix_storefront:*:*:*:*:ltsr:*:*:*
cloudcitrix_storefront*cpe:2.3:a:cloud:citrix_storefront:*:*:*:*:*:*:*:*
cloudcitrix_storefront1912cpe:2.3:a:cloud:citrix_storefront:1912:-:*:*:ltsr:*:*:*

Vendor	Product	Version	CPE
cloud	citrix_storefront	*	cpe:2.3:a:cloud:citrix_storefront:::::ltsr:::*
cloud	citrix_storefront	*	cpe:2.3:a:cloud:citrix_storefront::::::::
cloud	citrix_storefront	1912	cpe:2.3:a:cloud:citrix_storefront:1912:-:::ltsr:::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Citrix StoreFront",
    "vendor": "Cloud Software Group",
    "versions": [
      {
        "lessThan": "1",
        "status": "affected",
        "version": "2308 Current Release",
        "versionType": "patch"
      },
      {
        "lessThan": "0",
        "status": "affected",
        "version": "2311 Current Release",
        "versionType": "patch"
      },
      {
        "lessThan": "CU8 hotfix 3.22.8001.2",
        "status": "affected",
        "version": "1912 LTSR",
        "versionType": "patch"
      },
      {
        "lessThan": "CU4 Update 1",
        "status": "affected",
        "version": "2203 LTSR ",
        "versionType": "patch"
      }
    ]
  }
]

References

support.citrix.com/article/CTX583759/citrix-storefront-security-bulletin-for-cve20235914

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

43.5%

JSON

Related for CVE-2023-5914