CVE-2023-6184

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Jan 18, 2024
Updated: Jan 24, 2024
CWE ID 913
CWE ID 79

Summary

CVE-2023-6184 is a Cross SiteScripting (XSS) vulnerability affecting Citrix Session Recording. An attacker who successfully exploits this flaw can inject malicious scripts into a victim's web browser, potentially stealing sensitive information or taking control of the user's session. This vulnerability poses a significant threat to organizations that use Citrix Session Recording, as it can be exploited through specially crafted URLs or web pages. To mitigate the risk, affected organizations are urged to apply the relevant patch or update provided by Citrix as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Citrix Virtual Apps and Desktops

Affected Vendors

  • Citrix Systems