cve/2015/CVE-2015-2841.md

### [CVE-2015-2841](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2841)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Content-Type header, as demonstrated by the application/octet-stream and text/xml Content-Types.

### POC

#### Reference
- http://seclists.org/fulldisclosure/2015/Mar/95
- https://www.exploit-db.com/exploits/36369/

#### Github
No PoCs found on GitHub currently.