PT-2024-5658 · Citrix · Citrix Workspace App For Html5

Published 2024-07-09 · Updated 2024-10-29 · CVE-2024-6149

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Citrix Workspace App for HTML5 (affected versions not specified)

Description The issue is related to a redirection vulnerability in Citrix Workspace App for HTML5, where an attacker can redirect users to an arbitrary URL using a specially crafted link. This can allow a remote attacker to redirect users to a malicious site.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2024-06371

CVE-2024-6149

Affected Products

Citrix Workspace App For Html5

References · 9

• https://osv.dev/vulnerability/CVE-2024-6149 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6149 · Security Note
• https://bdu.fstec.ru/vul/2024-06371 · Security Note
• https://twitter.com/CVEnew/status/1811322691791757340 · Twitter Post
• https://twitter.com/ThomasPreischl/status/1810697797164822887 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1811168365794251023 · Twitter Post
• https://t.me/cvedetector/598 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2024071062 · Note
• https://support.citrix.com/article/CTX678037 · Note