An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
Published December 27, 2019.
Citrix Gateway Firmware
Citrix Application Delivery Controller Firmware
Citrix Netscaler Gateway Firmware