RelayState Ruse: Exploiting Reflected XSS in Citrix NetScaler

In the realm of cybersecurity, it’s not uncommon to stumble upon vulnerabilities while dissecting a system during the pursuit of reproducing an N-day. Security researchers at watchTowr Labs recently encountered such a scenario while analyzing CitrixBleed2 (CVE?2025?5777), which affected Citrix NetScaler appliances. During their analysis, they identified two vulnerabilities: a memory leak (WT-2025-0089) and a […]

The post RelayState Ruse: Exploiting Reflected XSS in Citrix NetScaler appeared first on SecPod Blog.