漏洞描述
Citrix ADC and Citrix Gateway versions before 13.1 and 13.1-45.61, 13.0 and 13.0-90.11, 12.1 and 12.1-65.35 contain a cross-site scripting vulnerability due to improper input validation.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
support.citrix.comhttps://support.citrix.com/article/CTX477714/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202324487-cve202324488↗blog.assetnote.iohttps://blog.assetnote.io/2023/06/29/citrix-xss-advisory/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2023-24488↗twitter.comhttps://twitter.com/infosec_au/status/1674786106381070342↗twitter.comhttps://twitter.com/bxmbn/status/1675250259608449026↗