packetstormsecurity.com
http://packetstormsecurity.com/files/156037/Citrix-XenMobile-Server-10.8-XML-Injection.html CVE-2018-10653
CRITICAL
Citrix XenMobile Server 10.8 - XML External Entity Injection
Record summary
CVE-2018-10653 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCitrix XenMobile Server 10.8 - XML External Entity InjectionExploitDB exploitby Jonas LejonNot analyzed1 file
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-10653 support.citrix.comConfirmation
https://support.citrix.com/article/CTX234879