pentester.land· Nov 30, 2021· by Wolfgang Ettlinger🔍 CVE-2020-8300

HTTP Header Injection In Citrix ADC And Citrix Gateway (CVE-2020-8300, CVE-2021-22927)

Target Program: Citrix Systems

🎯 Vulnerability: Cross-Site Scripting (XSS)

💡 Defense Fix: Enforce Context-Aware Output Encoding, strict Content-Security-Policy (CSP), and HttpOnly cookie flags.

#Host header injection#XSS#CVE-2020-8300#CVE-2021-22927