Citrix Content Collaboration ShareFile Improper Access Control Vulnerability (CVE-2023-24489)

What is Citrix Content Collaboration?





Citrix Content Collaboration is a security-focused collaboration, content sharing and synchronization service from Citrix for the enterprise.








What is the Attack?





CVE-2023-24489 is a directory traversal vulnerability that affects Citrix Systems ShareFile StorageZones Controller prior to 5.11.24.




The vulnerability is due to improper validation of user input in the ProcessRawPostedFile function. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted requests to the target server. Successful exploitation could allow an attacker to save …

access access control attack citrix collaboration control controller cve cve-2023-24489 directory directory traversal enterprise security service sharefile sharing storagezones synchronization systems validation vulnerability what is