CVE-2024-2449

CVE-2024-2449 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Progress LoadMaster products. A remote attacker with prior knowledge of a LoadMaster's IP or hostname could trick an authenticated administrator into visiting a malicious third-party site. This would allow the attacker to execute HTTP transactions on the administrator's behalf, potentially leading to high impact on confidentiality, integrity, and availability, as indicated by its CVSS score of 7.5 (HIGH). There is currently no public exploit code, active exploitation, or significant community discussion surrounding this vulnerability.