writeups.xyz / Encrypted Doesn't Mean Authenticated: ShareFile RCE (CVE-2023-24489)

Submitter : c2a

Date: 4 July 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Path Traversal
• Cryptographic Issues
• Security Code Review

Programs :

• Citrix (ShareFile)

Authors :

• Dylan Pindur

Link :
https://blog.assetnote.io/2023/07/04/citrix-sharefile-rce/