CVE-2024-6149 — Open Redirect in Citrix Workspace APP FOR Html5

CWE-601 — Open RedirectCWE-276 — Incorrect Default Permissions3 documents3 sources
Severity
4.8MEDIUMNVD
EPSS
0.3%
top 43.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Citrix Workspace APP FOR Html5Citrix WorkspaceCitrix Workspace APP+2 more
Timeline
PublishedJul 10
Latest updateJul 15

Description

Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages6 packages

▶NVDcitrix/workspace< 2404.1

🔴Vulnerability Details

1
GHSA
GHSA-m2fx-wq5j-8657: Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5↗2024-07-10
▶

📋Vendor Advisories

1
Citrix
Citrix Workspace app for HTML5 Security Bulletin CVE-2024-6148 and CVE-2024-6149↗2024-07-15
▶