Skip to content
OpenAdvisories

Vendor

locustio

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.4

    Locust through 2.46.7 CSRF via Web UI /stop and /stats/reset

    Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site …