Exploit for Code Injection in Citrix Netscaler Application Delivery Controller

githubexploit · 2023-08-06

Description

PoC for CVE-2023-3519 shows an arbitrary file read in some Apache HTTP Server versions.

Affected software

Citrix Netscaler Application Delivery Controller< 12.1-55.297, 13.0-91.13, 13.1-37.159, 13.1-49.13

Citrix Netscaler Gateway< 13.0-91.13, 13.1-49.13

All known vulnerabilities by product

Citrix Adc Citrix Netscaler Adc Citrix Netscaler Gateway

CVSS 9.8 for CVE-2023-3519

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 1 file(s) in the source

EPSS Score

99.7%higher than 100.0% of all CVEs

Updated 2026-07-21

Exploit Details

Modified:2025-02-14 17:11

Last Seen:2025-09-06 04:04

Reporter:rwincey

Written in:Python

Last commit:2023-08-10

Tags

arbitrary file readCVE-2023-3519apache servercode injection

Other exploits for CVE-2023-3519

Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller

2023-10-27 MohammaddvdGITHUB

Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller

2023-08-31 JonaNeidhartGITHUB

Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller

2023-08-24 ChocapikkGITHUB

Citrix ADC nsppe buffer overflow

2023-08-09 SAINT CorporationSAINT

Citrix ADC nsppe buffer overflow

2023-08-09 SAINT CorporationSAINT

Citrix ADC (NetScaler) Remote Code Execution Exploit

2023-08-08 metasploitZDTRuby

Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller

2023-08-05 passwa11GITHUB

Citrix ADC (NetScaler) Remote Code Execution

2023-08-04 Ron Bowes, Spencer McIntyre, Douglass McKee, metasploit.comPACKETSTORMRuby

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=CB31A9DA-99E1-523F-891C-D727E0E3B80B
PoC exploit for CVE-2023-3519, an arbitrary file read vulnerability in certain versions of Apache HTTP Server. The target product/service is Apache HTTP Server, with the vulnerability class/vector being LFI/RFI. The probable entry point is the exploit.py script. Not specified how it is typically invoked. The expected impact is arbitrary file read.