What’s Vulnerable › Vulnerabilities

CVE-2023-6184

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 46.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-18 · updated 2026-06-17
• Weakness: CWE-913

Description

Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting

Affected products

• Citrix Virtual Apps and Desktops: through 2311; 1912-cu1, 1912-cu2, 1912-cu3, 1912-cu4, 1912-cu5, 1912-cu6 (+4); 1912, 2203
• Citrix Session Recording: from 2311 Current Release before 0; from 1912 LTSR before CU8 hotfix 19.12.8100.4; from 2203 LTSR before CU4 — fixed in 0, CU8 hotfix 19.12.8100.4, CU4

How to fix

Upgrade to a fixed version: Citrix Session Recording 0, CU8 hotfix 19.12.8100.4, CU4. Check the vendor advisory for mitigations.

References

• https://support.citrix.com/article/CTX583930/citrix-session-recording-security-bulletin-for-cve20236184
• https://support.citrix.com/article/CTX583930/citrix-session-recording-security-bulletin-for-cve20236184

Get alerted when CVE-2023-6184 or the next vulnerability affects your stack