{"id":"CVE-2023-24488","published":"2023-07-10T20:41:31Z","modified":"2024-10-25T19:51:19Z","title":"Cross site scripting","vendor":"Citrix","product":"Citrix ADC and Citrix Gateway ","tier":"core","eol":null,"affectedVersions":[{"vendor":"Citrix","product":"Citrix ADC and Citrix Gateway ","versions":[">= 13.1, < 13.1-45.61 ",">= 13.0, < 13.0-90.11 ",">= 12.1, < 12.1-65.35",">= 12.1-FIPS, < 12.1-55.296",">= 13.1-FIPS, < 13.1-37.150 ",">= 12.1-NDcPP, < 12.1-55.296"]}],"description":{"text":"Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scripting","provenance":"source","from":"CVE.org"},"summary":{"text":"The vulnerability is a cross-site scripting flaw in the Citrix ADC and Citrix Gateway products, where input is not properly neutralized during web page generation. An attacker can inject script into pages served by the affected components, and exploitation requires network access, no authentication, and a user to interact with the crafted content.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:33Z"},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.81169,"percentile":0.99633,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2023-11-15","exploitedFirstSeen":"2023-11-15","ransomware":false,"evidence":[{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-15&host_type=src&vulnerability=cve-2023-24488","date":"2023-11-15"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-21&host_type=src&vulnerability=cve-2023-24488","date":"2023-11-21"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-22&host_type=src&vulnerability=cve-2023-24488","date":"2023-11-22"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-23&host_type=src&vulnerability=cve-2023-24488","date":"2023-11-23"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-25&host_type=src&vulnerability=cve-2023-24488","date":"2023-11-25"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-27&host_type=src&vulnerability=cve-2023-24488","date":"2023-11-27"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-29&host_type=src&vulnerability=cve-2023-24488","date":"2023-11-29"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-30&host_type=src&vulnerability=cve-2023-24488","date":"2023-11-30"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-01&host_type=src&vulnerability=cve-2023-24488","date":"2023-12-01"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-02&host_type=src&vulnerability=cve-2023-24488","date":"2023-12-02"}],"evidenceTotal":561,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation"}],"references":[{"url":"https://support.citrix.com/article/CTX477714/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202324487-cve202324488","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-28506","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-28506","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":4,"skipped":0,"earliest":"2023-07-01","earliestUrl":"https://github.com/SirBugs/CVE-2023-24488-PoC","repos":[{"name":"securitycipher/CVE-2023-24488","url":"https://github.com/securitycipher/CVE-2023-24488","stars":14,"created":"2023-07-04"},{"name":"SirBugs/CVE-2023-24488-PoC","url":"https://github.com/SirBugs/CVE-2023-24488-PoC","stars":9,"created":"2023-07-01"},{"name":"NSTCyber/CVE-2023-24488-SIEM-Sigma-Rule","url":"https://github.com/NSTCyber/CVE-2023-24488-SIEM-Sigma-Rule","stars":1,"created":"2023-07-06"},{"name":"raytheon0x21/CVE-2023-24488","url":"https://github.com/raytheon0x21/CVE-2023-24488","stars":0,"created":"2023-07-31"}]},"nuclei":[{"id":"CVE-2023-24488","name":"Citrix Gateway and Citrix ADC - Cross-Site Scripting","severity":"medium","path":"http/cves/2023/CVE-2023-24488.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24488.yaml"}],"first":{"date":"2023-07-01","source":"PoC-in-GitHub","url":"https://github.com/SirBugs/CVE-2023-24488-PoC"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-07-01","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/SirBugs/CVE-2023-24488-PoC","provenance":"source"},{"date":"2023-07-10","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-24488","provenance":"source"},{"date":"2023-11-15","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-15&host_type=src&vulnerability=cve-2023-24488","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":64.2,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1080 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.93,"detail":"percentile 0.9963"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"4 PoC-in-GitHub repos; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":4.27,"detail":"base score 6.1"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}