CVE-2023-24487: Arbitrary file read in Citrix ADC and Citrix Gateway

PriorityP343high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

EPSS

1.07%

60.7th percentile

Arbitrary file read in Citrix ADC and Citrix Gateway

Affected

17 ranges

Vendor	Product	Version range	Fixed in
citrix	application_delivery_controller	>= 12.1 < 12.1-55.296	12.1-55.296
citrix	application_delivery_controller	>= 12.1 < 12.1-65.35	12.1-65.35
citrix	application_delivery_controller	>= 13.0 < 13.0-90.11	13.0-90.11
citrix	application_delivery_controller	>= 13.1 < 13.1-37.150	13.1-37.150
citrix	application_delivery_controller	>= 13.1 < 13.1-45.61	13.1-45.61
citrix	citrix_adc	—	—
citrix	citrix_adc_and_citrix_gateway	>= 12.1 < 12.1-65.35	12.1-65.35
citrix	citrix_adc_and_citrix_gateway	>= 12.1-FIPS < 12.1-55.296	12.1-55.296
citrix	citrix_adc_and_citrix_gateway	>= 12.1-NDcPP < 12.1-55.296	12.1-55.296
citrix	citrix_adc_and_citrix_gateway	>= 13.0 < 13.0-90.11	13.0-90.11
citrix	citrix_adc_and_citrix_gateway	>= 13.1 < 13.1-45.61	13.1-45.61
citrix	citrix_adc_and_citrix_gateway	>= 13.1-FIPS < 13.1-37.150	13.1-37.150
citrix	citrix_gateway	—	—
citrix	gateway	>= 12.1 < 12.1-65.35	12.1-65.35
citrix	gateway	>= 13.0 < 13.0-90.11	13.0-90.11
citrix	gateway	>= 13.1 < 13.1-45.61	13.1-45.61
citrix	xenserver	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.