Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

1 Reply

  • The bit you want to save is the HTTP::query basic iRule to change Location header keeping the HTTP query string:

    when HTTP_RESPONSE {
    
      if { [HTTP::header exists Location] } {
    
        HTTP::header replace Location https://mwafetest.test.com/ApproveReject.aspx?[HTTP::query]
    
      }
    }