CVE-2024-5492

Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites

State: Published
Severity: 5.1 Medium
Published: Jul 10, 2024
Updated: Aug 1, 2024
Reserved: May 29, 2024

Description

Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway

Scores

CVSS	Score	Vector	Source
4.0	5.1 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N	Citrix

Weaknesses

CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

Affected Products

Product	Versions
NetScaler ADCNetSclaer	14.1 to before 25.53Affected 13.1 to before 53.17Affected 13.0 to before 92.13Affected 13.1-FIPS to before 37.183Affected 12.1-FIPS to before 55.304Affected 12.1-NDcPP to before 55.304Affected

References

https://support.citrix.com/article/CTX677944/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.