CVE-2023-24488: Cross site scripting
Published Jul 10, 2023
·Updated
Cross site scripting vulnerability in Citrix ADC and Citrix Gateway in allows and attacker to perform cross site scripting
Other sources
Cross site scripting vulnerability in Citrix ADC and Citrix Gateway? in allows and attacker to perform cross site scripting
Affected Software
8 affected components
Citrix Gateway>=12.1<12.1-65.35
Citrix Gateway>=13.0<13.0-90.11
Citrix Gateway>=13.1<13.1-45.61
Citrix Application Delivery Controller>=12.1<12.1-55.296
Citrix Application Delivery Controller>=12.1<12.1-55.296
Citrix Application Delivery Controller>=12.1<12.1-65.35
Citrix Application Delivery Controller>=13.0<13.0-90.11
Citrix Application Delivery Controller>=13.1<13.1-45.61
Event History
Jul 10, 2023
CVE Published
via MITRE·08:41 PM
Data Sourced
via MITRE·08:41 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-24488?
CVE-2023-24488 is a cross-site scripting vulnerability in Citrix ADC and Citrix Gateway.
2
What is the severity of CVE-2023-24488?
CVE-2023-24488 has a severity rating of medium with a CVSS score of 6.1.
3
How does CVE-2023-24488 affect Citrix ADC and Citrix Gateway?
CVE-2023-24488 allows an attacker to perform cross-site scripting attacks on Citrix ADC and Citrix Gateway.
4
What versions of Citrix Gateway are affected by CVE-2023-24488?
Citrix Gateway versions 12.1-65.35, 13.0-90.11, and 13.1-45.61 are affected by CVE-2023-24488.
5
How can I fix CVE-2023-24488?
To fix CVE-2023-24488, update Citrix ADC and Citrix Gateway to the latest version available.