medium5.0Public exploit code
CVE-2015-2841
Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Content-Type header, as…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Citrix Netscaler NS10.5 - WAF Bypass (Via HTTP Header Pollution)2015-03-12 · webapps · xml
Impact
Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Content-Type header, as demonstrated by the application/octet-stream and text/xml Content-Types.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Citrix | Netscaler | Version 10.5 |