ID:5378 - Exploit for Path traversal in Citrix NetScaler Application Delivery Controller - CVE-2019-19781

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences in Citrix NetScaler. A remote attacker can send a specially crafted HTTP request and read arbitrary files or execute commands on the system.

Successful exploitation of the vulnerability may allow remote code execution.

Remediation