For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Azerturkbank's avatar
Azerturkbank
Icon for Nimbostratus rankNimbostratus
Nov 06, 2019

CSRF-Token request header is missing when using

Hello experts. I am in need of your help. I am experiencing with the problem that I suppose it is related to CSRF token. So When I connect directly to the server, every single link works properly,...
application delivery
BIG-IP
LTM
Azerturkbank's avatar
Azerturkbank
Icon for Nimbostratus rankNimbostratus
Nov 07, 2019

 These two errors are weblogic side errors.

https://webserver.test.local/E2/pages/admpages/users/showusers.jsf does not match request domain: http://webserver.test.local:80/E2/JS/csrfguard.js

 

[Wed Nov 06 17:58:16 AZT 2019] [Error] Potential cross-site request forgery attack to /E2/pages/admpages/users/showusers.jsf from 10.10.10.150:41638