Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Azerturkbank's avatar
Azerturkbank
Icon for Nimbostratus rankNimbostratus
Nov 06, 2019

CSRF-Token request header is missing when using

Hello experts. I am in need of your help. I am experiencing with the problem that I suppose it is related to CSRF token. So When I connect directly to the server, every single link works properly,...
application delivery
big-ip
LTM
Azerturkbank's avatar
Azerturkbank
Icon for Nimbostratus rankNimbostratus
Nov 06, 2019

 These two errors are weblogic side errors.

https://webserver.test.local/E2/pages/admpages/users/showusers.jsf does not match request domain: http://webserver.test.local:80/E2/JS/csrfguard.js

 

[Wed Nov 06 17:58:16 AZT 2019] [Error] Potential cross-site request forgery attack to /E2/pages/admpages/users/showusers.jsf from 10.10.10.150:41638