CVSS 3.1 Score 7.5 of 10 (high)


Published Mar 22, 2024
CWE ID 352


CVE-2024-2449 is a cross-site request forgery vulnerability that affects LoadMaster, allowing a malicious actor with knowledge of the IP or hostname to direct an authenticated LoadMaster administrator to a third-party site. This could enable the execution of HTTP transactions on behalf of the administrator. The vulnerability has a base severity rating of HIGH and has a CVSS vector string indicating network-based attack vector, required user interaction, and high impact on integrity and confidentiality. The exploitability score is 1.6 out of 10, indicating a relatively low level of difficulty for exploitation. To remediate this vulnerability, it is recommended to apply the necessary patches or updates provided by the vendor. If left unaddressed, the vulnerability poses a significant danger to organizations relying on LoadMaster as it could lead to unauthorized actions performed by an attacker using legitimate administrator credentials.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-2449 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options