CVE-2019-13608: Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.
Other sources
Citrix StoreFront Server contains an XML External Entity (XXE) processing vulnerability that may allow an unauthenticated attacker to retrieve potentially sensitive information.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-13608?
CVE-2019-13608 has been rated as high severity due to its potential exploitation by unauthenticated attackers.
How do I fix CVE-2019-13608?
To fix CVE-2019-13608, upgrade Citrix StoreFront Server to version 1903 or higher, or apply the appropriate cumulative updates for earlier versions.
What types of attacks are possible with CVE-2019-13608?
CVE-2019-13608 allows for XML External Entity (XXE) attacks which can lead to unauthorized data exposure.
Which versions of Citrix StoreFront Server are affected by CVE-2019-13608?
CVE-2019-13608 affects Citrix StoreFront Server versions prior to 1903, 7.15 LTSR before CU4, and 7.6 LTSR before CU8.
Can CVE-2019-13608 be exploited remotely?
Yes, CVE-2019-13608 can be exploited remotely by an unauthenticated attacker.