{"schema":"vulnpedia.poc/1","cve":"CVE-2023-3519","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2023-07-19","ransomware":true},"epss":{"score":0.99749,"percentile":0.99954},"cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/citrix_formssso_target_rce.rb","executable":true,"sourceId":"exploit/freebsd/http/citrix_formssso_target_rce","description":"Citrix ADC (NetScaler) Forms SSO Target RCE","verification":"catalogued","source":"metasploit","modified":"2026-04-22 11:59:31 +0000","origins":[{"source":"metasploit","sourceId":"exploit/freebsd/http/citrix_formssso_target_rce","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/citrix_formssso_target_rce.rb"},{"source":"metasploit","sourceId":"exploit/freebsd/http/citrix_formssso_target_rce","modified":"2026-04-22 11:59:31 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/citrix_formssso_target_rce.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/d8dc36e352eb","executable":false,"sourceId":"d8dc36e352eb","verification":"catalogued","source":"vulncheck-kev","modified":"2023-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d8dc36e352eb","modified":"2023-07-18T00:00:00Z","url":"https://vulncheck.com/xdb/d8dc36e352eb"}],"repositoryUrl":"https://github.com/assetnote/exploits"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/1ff61bc7f252","executable":false,"sourceId":"1ff61bc7f252","verification":"catalogued","source":"vulncheck-kev","modified":"2023-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1ff61bc7f252","modified":"2023-07-18T00:00:00Z","url":"https://vulncheck.com/xdb/1ff61bc7f252"}],"repositoryUrl":"https://github.com/rwincey/cve-2023-3519"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/9e9c040fa62e","executable":false,"sourceId":"9e9c040fa62e","verification":"catalogued","source":"vulncheck-kev","modified":"2023-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9e9c040fa62e","modified":"2023-07-18T00:00:00Z","url":"https://vulncheck.com/xdb/9e9c040fa62e"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/2556fc59588e","executable":false,"sourceId":"2556fc59588e","verification":"catalogued","source":"vulncheck-kev","modified":"2023-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"2556fc59588e","modified":"2023-07-18T00:00:00Z","url":"https://vulncheck.com/xdb/2556fc59588e"}],"repositoryUrl":"https://github.com/dorkerdevil/CitrixFall"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/8bdcf32f9f84","executable":false,"sourceId":"8bdcf32f9f84","verification":"catalogued","source":"vulncheck-kev","modified":"2023-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8bdcf32f9f84","modified":"2023-07-18T00:00:00Z","url":"https://vulncheck.com/xdb/8bdcf32f9f84"}],"repositoryUrl":"https://github.com/SalehLardhi/CVE-2023-3519"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/1f43ba642b00","executable":false,"sourceId":"1f43ba642b00","verification":"catalogued","source":"vulncheck-kev","modified":"2023-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1f43ba642b00","modified":"2023-07-18T00:00:00Z","url":"https://vulncheck.com/xdb/1f43ba642b00"}],"repositoryUrl":"https://github.com/Chocapikk/CVE-2023-3519"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/2c8a25fd6e83","executable":false,"sourceId":"2c8a25fd6e83","verification":"catalogued","source":"vulncheck-kev","modified":"2023-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"2c8a25fd6e83","modified":"2023-07-18T00:00:00Z","url":"https://vulncheck.com/xdb/2c8a25fd6e83"}],"repositoryUrl":"https://github.com/passwa11/CVE-2023-3519"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/a40d42ae400a","executable":false,"sourceId":"a40d42ae400a","verification":"catalogued","source":"vulncheck-kev","modified":"2023-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a40d42ae400a","modified":"2023-07-18T00:00:00Z","url":"https://vulncheck.com/xdb/a40d42ae400a"}],"repositoryUrl":"https://github.com/BishopFox/CVE-2023-3519"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/1dceea81abe0","executable":false,"sourceId":"1dceea81abe0","verification":"catalogued","source":"vulncheck-kev","modified":"2023-07-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1dceea81abe0","modified":"2023-07-18T00:00:00Z","url":"https://vulncheck.com/xdb/1dceea81abe0"}],"repositoryUrl":"https://github.com/Mohammaddvd/CVE-2023-3519"}],"poc_candidates":[{"url":"https://github.com/telekom-security/cve-2023-3519-citrix-scanner","source":"poc-in-github","sourceId":"CVE-2023-3519","description":"Citrix Scanner for CVE-2023-3519","modified":"2026-09-25T12:03:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-3519","url":"https://github.com/telekom-security/cve-2023-3519-citrix-scanner"},{"source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2026-09-25T12:03:36Z","url":"https://github.com/telekom-security/cve-2023-3519-citrix-scanner"}],"tags":[]},{"url":"https://github.com/securekomodo/citrixInspector","source":"poc-in-github","sourceId":"CVE-2023-3519","description":"Passively fingerprint Citrix ADC / NetScaler ADC & Gateway builds and detect known CVEs — CVE-2023-3519, CitrixBleed 2/3, CVE-2026-8452, and CVE-2026-88771/88772 (KEV)","modified":"2026-10-03T10:32:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-3519","url":"https://github.com/securekomodo/citrixInspector"},{"source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2026-10-03T10:32:00Z","url":"https://github.com/securekomodo/citrixInspector"}],"tags":[]},{"url":"https://github.com/mr-r3b00t/CVE-2023-3519","source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2026-04-05T11:57:07Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-3519","url":"https://github.com/mr-r3b00t/CVE-2023-3519"},{"source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2026-04-05T11:57:07Z","url":"https://github.com/mr-r3b00t/CVE-2023-3519"}],"tags":[]},{"url":"https://github.com/d0rb/CVE-2023-3519","source":"poc-in-github","sourceId":"CVE-2023-3519","description":"CVE-2023-3519","modified":"2023-07-21T11:03:29Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-3519","url":"https://github.com/d0rb/CVE-2023-3519"},{"source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2023-07-21T11:03:29Z","url":"https://github.com/d0rb/CVE-2023-3519"}],"tags":[]},{"url":"https://github.com/BishopFox/CVE-2023-3519","source":"poc-in-github","sourceId":"CVE-2023-3519","description":"RCE exploit for CVE-2023-3519","modified":"2026-10-08T15:56:42Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-3519","url":"https://github.com/BishopFox/CVE-2023-3519"},{"source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2026-10-08T15:56:42Z","url":"https://github.com/BishopFox/CVE-2023-3519"}],"tags":[]},{"url":"https://github.com/SalehLardhi/CVE-2023-3519","source":"poc-in-github","sourceId":"CVE-2023-3519","description":"CVE-2023-3519 vuln for nuclei scanner","modified":"2023-10-02T06:20:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-3519","url":"https://github.com/SalehLardhi/CVE-2023-3519"},{"source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2023-10-02T06:20:40Z","url":"https://github.com/SalehLardhi/CVE-2023-3519"}],"tags":[]},{"url":"https://github.com/KR0N-SECURITY/CVE-2023-3519","source":"poc-in-github","sourceId":"CVE-2023-3519","description":"NetScaler (Citrix ADC) CVE-2023-3519 Scanner","modified":"2023-07-22T00:20:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-3519","url":"https://github.com/KR0N-SECURITY/CVE-2023-3519"},{"source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2023-07-22T00:20:11Z","url":"https://github.com/KR0N-SECURITY/CVE-2023-3519"}],"tags":[]},{"url":"https://github.com/passwa11/CVE-2023-3519","source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2023-08-21T15:40:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-3519","url":"https://github.com/passwa11/CVE-2023-3519"},{"source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2023-08-21T15:40:43Z","url":"https://github.com/passwa11/CVE-2023-3519"}],"tags":[]},{"url":"https://github.com/rwincey/cve-2023-3519","source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2025-02-14T17:11:46Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-3519","url":"https://github.com/rwincey/cve-2023-3519"},{"source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2025-02-14T17:11:46Z","url":"https://github.com/rwincey/cve-2023-3519"}],"tags":[]},{"url":"https://github.com/mandiant/citrix-ioc-scanner-cve-2023-3519","source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2026-06-07T07:22:29Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-3519","url":"https://github.com/mandiant/citrix-ioc-scanner-cve-2023-3519"},{"source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2026-06-07T07:22:29Z","url":"https://github.com/mandiant/citrix-ioc-scanner-cve-2023-3519"}],"tags":[]},{"url":"https://github.com/Chocapikk/CVE-2023-3519","source":"poc-in-github","sourceId":"CVE-2023-3519","description":"Citrix ADC RCE CVE-2023-3519","modified":"2026-08-10T14:45:05Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-3519","url":"https://github.com/Chocapikk/CVE-2023-3519"},{"source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2026-08-10T14:45:05Z","url":"https://github.com/Chocapikk/CVE-2023-3519"}],"tags":[]},{"url":"https://github.com/JonaNeidhart/CVE-2023-3519-BackdoorCheck","source":"poc-in-github","sourceId":"CVE-2023-3519","description":"Script for checking CVE-2023-3519 for Backdoors","modified":"2023-08-31T09:14:30Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-3519","url":"https://github.com/JonaNeidhart/CVE-2023-3519-BackdoorCheck"},{"source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2023-08-31T09:14:30Z","url":"https://github.com/JonaNeidhart/CVE-2023-3519-BackdoorCheck"}],"tags":[]},{"url":"https://github.com/dhammerg/CVE-2023-3519","source":"poc-in-github","sourceId":"CVE-2023-3519","description":"Stack-Overflow on Citrix","modified":"2025-04-13T17:03:18Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-3519","url":"https://github.com/dhammerg/CVE-2023-3519"},{"source":"poc-in-github","sourceId":"CVE-2023-3519","modified":"2025-04-13T17:03:18Z","url":"https://github.com/dhammerg/CVE-2023-3519"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2023-3519 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2023-3519/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3519.yaml","template":"http/cves/2023/CVE-2023-3519.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2023-3519%22&type=repositories","executable":false}]}