Vulnerability Bulletins |
CVE-2015-2839 |
|
| Affected software | CITRIX |
| The Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when returning an error message, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the file_name JSON member in params/xen_hotfix/0 to nitro/v1/config/xen_hotfix. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2015-2839 | |