writeups.xyz / CVE-2024-2448: Authenticated Command Injection In Progress Kemp LoadMaster

Submitter : c2a

Date: 16 April 2024

Bounty : undisclosed

Vulnerabilities :

• OS Command Injection
• CSRF
• Security Code Review

Programs :

• Progress (Kemp LoadMaster)

Authors :

• David Yesland (@Daveysec)

Link :
https://rhinosecuritylabs.com/research/cve-2024-2448-kemp-loadmaster/