Forum Discussion

Nimbostratus

Nov 07, 2018

Configure iRule for CWE ID 352 CWE name Cross-Site Request Forgery (CSRF) vulnerability

How to configure the irule to fix the vulnerability CWE ID 352 CWE name Cross-Site Request Forgery (CSRF) in F5. FA_Session cookie is set by f5 load balancer to route request to same app servers...

Nacreous

Nov 07, 2018

There a very good article that explains this problem and provides an iRule and a traffic policy example on how to mitigate this CVE

https://devcentral.f5.com/articles/increased-security-with-first-party-cookies-30715

Recent Discussions

Background Tasks
Nov 22, 2024
eagertolearn
APM with EntraID as idP / request signed
Nov 22, 2024
andradejp
Should config via cli rather than gui?
Nov 22, 2024
Herman2024
APM Modern Customization - modify Header in user-common.js and form in user-logon.js
Nov 22, 2024
emalzer
Which process is consuming higher CPU
Nov 22, 2024
eagertolearn

Under Attack? F5 Will Help You.
Contacting F5 Support?

DevCentral Quicklinks

* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com

Discover DevCentral Connects

* Podcasts
* Social Channels
* Video Streaming

Forum Discussion

Configure iRule for CWE ID 352 CWE name Cross-Site Request Forgery (CSRF) vulnerability

Recent Discussions

Background Tasks

APM with EntraID as idP / request signed

Should config via cli rather than gui?

APM Modern Customization - modify Header in user-common.js and form in user-logon.js

Which process is consuming higher CPU

Related Content

Cross Site Scripting (XSS) Exploit Paths

How To Protect Your Applications from Cross Site Request Forgery (CSRF) with F5 Distributed Cloud

Coordinated Vulnerability Disclosure: A Balanced Approach

Windows Critical RCE Vulnerability, Malicious Solana-py, and EDRKillShifter

Lightboard Lessons: OWASP Top 10 - Cross Site Scripting

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS