CVE-2024-6149
published 2024-07-10CVE-2024-6149: Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5
PriorityP425medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.22%
13.1th percentile
Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| citrix | citrix_workspace_app | — | — |
| citrix | citrix_workspace_app_for_html5 | >= 2404 < 1 | 1 |
| citrix | storefront | — | — |
| citrix | workspace | < 2404.1 | 2404.1 |
| citrix | workspace | — | — |
| citrix | xenserver | — | — |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv4.04.8MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Citrix
Citrix Workspace app for HTML5 Security Bulletin CVE-2024-6148 and CVE-2024-6149
vendor_citrix·2024-07-15·CVSS 5.3
CVE-2024-6148 [MEDIUM] CWE-276 Citrix Workspace app for HTML5 Security Bulletin CVE-2024-6148 and CVE-2024-6149
Citrix Workspace app for HTML5 Security Bulletin CVE-2024-6148 and CVE-2024-6149
of Problem Two vulnerabilities have been discovered that impact the Citrix Workspace app for HTML5. Refer to below for further details:
CVE References: CVE-2024-6148, CVE-2024-6149
Affected Products: Citrix Workspace app, StoreFront, XenServer, storefront, workspace
Severity: Medium
CVSS Score: 5.3
Remediation:
Citrix strongly recommends that customers upgrade their Citrix Workspace app for HTML5 to the version containing the fixes as soon as possible. Citrix Workspace app for HTML5 versions that contain the fixes are: Citrix Workspace app for HTML5 2404.1 and later versions Customers can upgrade vulnerable version of Citrix Workspace app for HTML5 on StoreFront CR or LTSR Layouts by downloading Citrix Work
GHSA
GHSA-m2fx-wq5j-8657: Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5
ghsa_unreviewed·2024-07-10
CVE-2024-6149 [MEDIUM] CWE-601 GHSA-m2fx-wq5j-8657: Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5
Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-07-10
Published