Exploitation Summary
EIP tracks 3 public exploits for CVE-2025-12101. PoCs published by 7amzahard, 6h4ack, boneys. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a Python-based scanner for detecting reflected XSS (CVE-2025-12101) in Citrix NetScaler ADC/Gateway appliances. It sends a crafted SAMLResponse payload to `/cgi/logout` and checks for reflection of a `<script>alert(1)</script>` payload in the response.
Description
Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
Exploits (3)
This repository contains a Python-based scanner for detecting reflected XSS (CVE-2025-12101) in Citrix NetScaler ADC/Gateway appliances. It sends a crafted SAMLResponse payload to `/cgi/logout` and checks for reflection of a `<script>alert(1)</script>` payload in the response.
This repository contains a Python-based proof-of-concept (PoC) for CVE-2025-12101, a reflected XSS vulnerability in Citrix NetScaler ADC/Gateway. The script sends a crafted SAMLResponse and RelayState payload to the /cgi/logout endpoint and checks if the payload is reflected in the response.
This is a multi-threaded scanner for CVE-2025-12101, a reflected XSS vulnerability in Citrix NetScaler via SAML RelayState. It verifies the vulnerability by injecting a unique marker in the payload and checking for its presence in the response.
Nuclei Templates (1)
http.title:"citrix gateway"
References (1)
Scores
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L