Threat actors have launched attacks leveraging a recently patched critical request smuggling flaw in F5’s BIG-IP offering, tracked as CVE-2023-46747, just days after the release of a proof-of-concept exploit code, SecurityWeek reports. Such intrusions have also involved the exploitation of another flaw within F5 BIG-IP’s configuration utility, tracked as CVE-2023-46748, according to F5, which has already issued updated indicators-of-compromise for both bugs.

Source: SC Magazine