| Package | Affected versions | Patched versions |
|---|---|---|
| netscaler application delivery controller | ≥ 13.1, < 13.1-64.23≥ 13.1, < 13.1.37.279≥ 14.1, < 14.1-73.37≥ 14.1-66.68, ≤ 14.1-73.37 | 13.1-64.2313.1.37.27914.1-73.37 |
| netscaler gateway | ≥ 13.1, < 13.1-64.23≥ 14.1, < 14.1-73.37 | 13.1-64.2314.1-73.37 |
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP URL based expression usage.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free