CVE-2023-6184
Published: 18 January 2024
Summary
CVE-2023-6184 is a medium-severity Improper Control of Dynamically-Managed Code Resources (CWE-913) vulnerability in Citrix Virtual Apps And Desktops. Its CVSS base score is 5.0 (Medium).
Operationally, ranked in the top 4.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Citrix Session Recording contains a cross-site scripting vulnerability tracked as CVE-2023-6184 and assigned CWE-79 and CWE-913. The flaw permits an attacker to inject and execute arbitrary scripts within the application, as reflected in its CVSS 3.1 score of 5.0 with the vector AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N.
An attacker who already possesses administrative credentials and can reach the Session Recording interface over the network may leverage the issue to obtain elevated confidentiality access and limited integrity impact. Exploitation requires high attack complexity and does not rely on user interaction.
The official Citrix security bulletin CTX583930 addresses the vulnerability and supplies remediation guidance for affected Session Recording deployments.
EPSS for the CVE rose from a low baseline to a peak of 0.3123 on 2025-12-11 before receding to the current value of 0.2080, indicating measurable post-disclosure exploitation interest that later subsided.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-58433
Vulnerability details
Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Penetration testing submits XSS payloads to web applications, detecting cross-site scripting flaws for subsequent remediation.
Requiring explicit authorization and ongoing control of mobile code implements proper management of dynamically loaded code resources.
Validates web inputs to reject script-related content that could produce XSS.
Output validation against expected content can reject or sanitize script content in generated web pages, reducing XSS exploitability.