CVE-2023-24488 PoC — Cross site scripting

Source

https://github.com/NSTCyber/CVE-2023-24488-SIEM-Sigma-Rule

Associated Vulnerability

Title: Cross site scripting (CVE-2023-24488)
Description:Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scripting

Description

Detect CVE-2023-24488 Exploitation Attempts

Readme

# Sigma Rule: Detection of Pre-Auth XSS CVE-2023-24488

Detect  Citrix Gateway  Pre-Auth XSS CVE-2023-24488  vulnerability exploitation attempts.
This Sigma rule looks for  XSS attack patterns in the `post_logout_redirect_uri` query parameter.


## Rule Description

The provided Sigma rule is designed to identify potential XSS attacks targeting the `post_logout_redirect_uri` parameter. It uses a regular expression pattern to match specific payloads commonly associated with XSS attacks.

## Usage

To utilize this Sigma rule,  You can import this rule into your SIEM platform to enhance your detection capabilities for Pre-Auth XSS CVE-2023-24488.

## Contribution

Contributions, bug reports, and suggestions are welcome! Feel free to open issues or submit pull requests to enhance the rule.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →