CVE-2022-27509 — Open Redirect in Citrix Application Delivery Management AND Citrix Gateway

CWE-601 — Open Redirect2 documents2 sources
Severity
6.1MEDIUMNVD
EPSS
0.3%
top 43.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Citirx Citrix Application Delivery Management AND Citrix GatewayCitrix Application Delivery Controller FirmwareCitrix Gateway
Timeline
PublishedJul 28
Latest updateJul 29

Description

Unauthenticated redirection to a malicious website

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages3 packages

▶NVDcitrix/gateway12.1 — 12.1-65.15+2

🔴Vulnerability Details

1
GHSA
GHSA-xgwp-wf98-3xhc: Unauthenticated redirection to a malicious website↗2022-07-29
▶