Cloud Software Group Citrix Session Recording

CVE-2023-6184

MEDIUM 5.0

En bref

Source: NVD
EPSS: EPSS 46.89 % · centile 99 (2026-11-01)
État: PUBLISHED
Publiée: 2024-01-18 01:04 UTC
Mise à jour: 2025-06-02 15:04 UTC
Attribuée par: Citrix
Statut NVD: Modified

Rechercher sur…

Description

Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting

Faiblesses (CWE)

CWE-913 — Contrôle incorrect de ressources de code gérées dynamiquement
CWE-79 — Injection de code indirecte (XSS)

Références

https://support.citrix.com/article/CTX583930/citrix-session-recording-security-bulletin-for-cve20236184

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.1	MEDIUM 5.0	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N	Citrix
CVSS 3.1	MEDIUM 5.0	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N	NVD · secure@citrix.com (Secondary)
CVSS 3.1	HIGH 7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	NVD · nvd@nist.gov (Primary)

Références européennes

ENISA EUVD · EUVD-2023-58433
GCVE · GCVE-0-2023-6184

Avis du CERT-FR

CERTFR-2024-AVI-0039 — Multiples vulnérabilités dans les produits Citrix · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

cpe:2.3:a:citrix:virtual_apps_and_desktops:*:*:*:*:-:*:*:* ≤ 2311
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:-:*:*:ltsr:*:*:*
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu1:*:*:ltsr:*:*:*
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu2:*:*:ltsr:*:*:*
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu3:*:*:*:*:*:*
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu3:*:*:ltsr:*:*:*
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu4:*:*:ltsr:*:*:*
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu5:*:*:ltsr:*:*:*
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu6:*:*:ltsr:*:*:*
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu7:*:*:ltsr:*:*:*
cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:-:*:*:ltsr:*:*:*
cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu1:*:*:ltsr:*:*:*
cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu2:*:*:ltsr:*:*:*
cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu3:*:*:ltsr:*:*:*

Produits affectés

Produit	Versions
Cloud Software Group · Citrix Session Recording	affected 2311 Current Release < 0 ; affected 1912 LTSR < CU8 hotfix 19.12.8100.4 ; affected 2203 LTSR < CU4

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD