CVE-2020-8245: 
NixOS vulnerability analysis and mitigation

The vulnerability (CVE-2020-8245) is an HTML Injection vulnerability affecting Citrix ADC, Citrix Gateway, and Citrix SD-WAN WANOP appliances. The vulnerability was discovered in multiple versions of these products, including Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, 12.1 before 12.1-58.15, 12.1-FIPS before 12.1-55.187, 12.0, 11.1 before 11.1-65.12, and Citrix SD-WAN WANOP versions 11.2 before 11.2.1a, 11.1 before 11.1.2a, 11.0 before 11.0.3f, and 10.2 before 10.2.7b. The vulnerability specifically affects the SSL VPN web portal functionality (CVE Mitre).

The vulnerability is classified as an Improper Input Validation issue that could lead to HTML Injection attacks against the SSL VPN web portal. The vulnerability was assigned on January 28, 2020, as indicated by the record creation date (CVE Mitre).

The vulnerability allows attackers to perform HTML Injection attacks against the SSL VPN web portal, potentially affecting the security of the web interface (Citrix Support).

Citrix has released security updates to address this vulnerability. The fixed versions include Citrix ADC and Gateway 13.0-64.35 or later, 12.1-58.15 or later, 12.1-FIPS version 12.1-55.187 or later, and 11.1-65.12 or later. For SD-WAN WANOP, the fixed versions are 11.2.1a or later, 11.1.2a or later, 11.0.3f or later, and 10.2.7b or later (Citrix Support).