CVE-2019-13608

Name of the Vulnerable Software and Affected Versions Citrix StoreFront Server versions prior to 1903 Citrix StoreFront Server 7.15 LTSR versions prior to CU4 (3.12.4000) Citrix StoreFront Server 7.6 LTSR versions prior to CU8 (3.0.8000)

Description The issue is related to incorrect restriction of XML external entity references, allowing for XXE attacks. This can enable a remote attacker to conduct XXE attacks.

Recommendations For versions prior to 1903, update to version 1903 or later. For 7.15 LTSR versions prior to CU4 (3.12.4000), apply CU4 (3.12.4000) or later. For 7.6 LTSR versions prior to CU8 (3.0.8000), apply CU8 (3.0.8000) or later.