exploitDog

CVE-2015-2838

Опубликовано: 03 апр. 2015

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands as nsroot via shell metacharacters in the file_name JSON member in params/xen_hotfix/0 to nitro/v1/config/xen_hotfix.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:citrix:netscaler:10.5:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04306

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-49gh-f88v-9xqf

github

больше 3 лет назад

Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands as nsroot via shell metacharacters in the file_name JSON member in params/xen_hotfix/0 to nitro/v1/config/xen_hotfix.

EPSS

Процентиль: 89%

0.04306

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352