CVE-2018-10648: Malicious File Upload
There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10648?
CVE-2018-10648 is considered a high-severity vulnerability due to its potential for unauthenticated file uploads that can lead to remote code execution.
How do I fix CVE-2018-10648?
To fix CVE-2018-10648, it is recommended that users upgrade to Citrix XenMobile Server version 10.8 after RP2 or 10.7 after RP3.
What versions are affected by CVE-2018-10648?
CVE-2018-10648 affects Citrix XenMobile Server versions 10.7 and 10.8 prior to their respective release patches RP2 and RP3.
Is authentication required to exploit CVE-2018-10648?
No, CVE-2018-10648 can be exploited without authentication, making it particularly dangerous for vulnerable installations.
What impact could CVE-2018-10648 have on systems?
Exploitation of CVE-2018-10648 can lead to unauthorized file uploads, potentially resulting in complete system compromise.