Live › vulnerability › CVE-2019-13608
Go to dashboardCitrix StoreFront Server parses XML in a way that lets an unauthenticated attacker make it load external entities. An attacker can use this to read potentially sensitive files or data from the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Citrix StoreFront Server | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the Citrix update per vendor instructions; the sources do not name the fixed build.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Citrix StoreFront Server contains an XML External Entity (XXE) processing vulnerability that may allow an unauthenticated attacker to retrieve potentially sensitive information.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2019-13608")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.