PT-2022-18460 · Citrix · Citrix Storefront

Published 2022-04-13 · Updated 2022-04-21 · CVE-2022-27503

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Citrix StoreFront versions 1912 before CU5 Citrix StoreFront versions 3.12 before CU9

Description A Cross-site Scripting (XSS) issue affects Citrix StoreFront, allowing potential exploitation.

Recommendations For Citrix StoreFront versions 1912 before CU5, update to CU5 or later to resolve the issue. For Citrix StoreFront versions 3.12 before CU9, update to CU9 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-27503

Affected Products

Citrix Storefront

References · 3

• https://osv.dev/vulnerability/CVE-2022-27503 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27503 · Security Note
• https://support.citrix.com/article/CTX377814 · Vendor Advisory