Read the docs
TI-2023-05679 Aliases CVE-2023-6184GHSA-28qj-gvxv-p5g9

Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting

Priority MEDIUM 62CWE-913Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.46888 98th percentileScored 2026-11-07
Fix Fixed Citrix Session Recording (Cloud Software Group): 0, CU8 hotfix 19.12.8100.4, CU4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CitrixCitrix Session Recording2311 Current Release to before 0; 1912 LTSR to before CU8 hotfix 19.12.8100.4; 2203 LTSR to before CU40, CU8 hotfix 19.12.8100.4, CU4Patch availableCNA
  • Citrix Session Recording VendorCitrix Affected 2311 Current Release to before 0; 1912 LTSR to before CU8 hotfix 19.12.8100.4; 2203 LTSR to before CU4 Fixed in 0, CU8 hotfix 19.12.8100.4, CU4 Patch available CNA

CPE configurations NVD · 14

CPEVersionsRoleVendor
cpe:2.3:a:citrix:virtual_apps_and_desktops:*:*:*:*:-:*:*:*up to 2311VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:-:*:*:ltsr:*:*:*1912VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu1:*:*:ltsr:*:*:*1912 cu1VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu2:*:*:ltsr:*:*:*1912 cu2VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu3:*:*:*:*:*:*1912 cu3VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu3:*:*:ltsr:*:*:*1912 cu3VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu4:*:*:ltsr:*:*:*1912 cu4VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu5:*:*:ltsr:*:*:*1912 cu5VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu6:*:*:ltsr:*:*:*1912 cu6VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu7:*:*:ltsr:*:*:*1912 cu7VulnerableCitrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:*:*:*:*:-:*:*:* Versions up to 2311 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:-:*:*:ltsr:*:*:* Versions 1912 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu1:*:*:ltsr:*:*:* Versions 1912 cu1 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu2:*:*:ltsr:*:*:* Versions 1912 cu2 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu3:*:*:*:*:*:* Versions 1912 cu3 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu3:*:*:ltsr:*:*:* Versions 1912 cu3 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu4:*:*:ltsr:*:*:* Versions 1912 cu4 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu5:*:*:ltsr:*:*:* Versions 1912 cu5 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu6:*:*:ltsr:*:*:* Versions 1912 cu6 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu7:*:*:ltsr:*:*:* Versions 1912 cu7 Vulnerable ·Citrix
Show 4 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:-:*:*:ltsr:*:*:*2203VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu1:*:*:ltsr:*:*:*2203 cu1VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu2:*:*:ltsr:*:*:*2203 cu2VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu3:*:*:ltsr:*:*:*2203 cu3VulnerableCitrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:-:*:*:ltsr:*:*:* Versions 2203 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu1:*:*:ltsr:*:*:* Versions 2203 cu1 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu2:*:*:ltsr:*:*:* Versions 2203 cu2 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu3:*:*:ltsr:*:*:* Versions 2203 cu3 Vulnerable ·Citrix

Remediation

  • Fix · CNA Citrix Session Recording (Cloud Software Group) Fixed in 0, CU8 hotfix 19.12.8100.4, CU4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-6184
  2. 2026-10-03 Alias added: GHSA-28qj-gvxv-p5g9

References

Advisory 1

  • TI-2020-06687 OS command injection in Citrix Virtual Apps and Desktops CVSS 3.1HIGH 8.8
  • TI-2020-06700 Improper privilege management in Citrix Virtual Apps and Desktops CVSS 3.1HIGH 8.8
  • TI-2020-06686 Improper privilege management in Citrix Virtual Apps and Desktops CVSS 3.1HIGH 8.8
  • TI-2024-05700 Improper privilege management in Citrix Windows Virtual Delivery Agent CVSS 4.0HIGH 8.5
  • TI-2023-10104 Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA CVSS 3.1HIGH 7.8
  • TI-2025-06140 Improper privilege management in Citrix Windows Virtual Delivery Agent for CVAD and… CVSS 4.0HIGH 7.3
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences