5.1Medium

CVE-2024-5492Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites

NetSclaer NetScaler ADC; citrix netscaler_application_delivery_controller; citrix netscaler_gateway Published: (2 years ago)

Description

Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway

Weakness (CWE): CWE-601

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
citrix netscaler_application_delivery_controller 14.1 – < 14.1-25.53, 13.1 – < 13.1-53.17, 13.0 – < 13.0-92.31, 13.1-FIPS – < 13.1-37.183, 12.1-FIPS – < 12.1-55.304, 12.1-NDcPP – < 12.1-55.304
citrix netscaler_gateway 14.1 – < 14.1-25.53, 13.1 – < 13.1-53.17, 13.0 – < 13.0-92.31
NetSclaer NetScaler ADC 14.1 – < 25.53, 13.1 – < 53.17, 13.0 – < 92.13, 13.1-FIPS – < 37.183, 12.1-FIPS – < 55.304, 12.1-NDcPP – < 55.304

References and patches