A cross-site request forgery vulnerability has been identified in LoadMaster. It is possible for a malicious actor, who has prior knowledge of the IP or hostname of a specific LoadMaster, to direct an authenticated LoadMaster administrator to a third-party site. In such a scenario, the CSRF payload hosted on the malicious site would execute HTTP transactions on behalf of the LoadMaster administrator.
2024-03-22T14:15:09.210
2025-02-10T19:33:51.660
Analyzed
CVSSv3.1: 7.5 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | progress | loadmaster | < 7.2.54.9 | Yes |
| Application | progress | loadmaster | < 7.2.59.3 | Yes |
| Application | progress | loadmaster | 7.1.35.10 | Yes |
| Application | progress | loadmaster | 7.2.48.10 | Yes |