CVE-2019-19781

9.8
9.8 / 10
CRITICAL

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.

Weakness: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Published: 2019-12-27

Community Advisory

Improve Advisory

CVE-2019-19781 Exploits (54)

Show all exploits (+44):

Official CVE References

View references (10)