all InfoSec news
Citrix ShareFile Reflected XSS on Login Page
Tenable Research Advisories www.tenable.com
A security-related issue with Citrix ShareFile login pages has been discovered. The issue is a reflected cross-site scripting attack which could allow a malicious actor to steal login credentials, tokens, execute code in the context of a victim's browser, or perform a variety of other malicious actions.
Citrix has elected not to publish information regarding this issue or provide notice to customers.
This issue can be triggered by visiting any of the login …
actor attack browser citrix citrix sharefile code context credentials cross-site issue login login credentials malicious page reflected xss scripting security sharefile steal tokens victim xss