Vulnerability · Published Jan 17, 2024 · Assigned by Citrix
CVE-2023-5914
Medium 5.4
In plain English
A medium-severity cross-site scripting in Citrix StoreFront from Cloud Software Group. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 75.5% (higher than 99.5% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)75.5%top 0.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Nuclei
Official description
Cross-site scripting (XSS)
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cloud Software Group | Citrix StoreFront | 2308 Current Release – before 12311 Current Release – before 01912 LTSR – before CU8 hotfix 3.22.8001.22203 LTSR – before CU4 Update 1 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N