Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2
Fixed In:
12.0.0
Opened: Oct 13, 2014 Severity: 3-Major Related Article:
K73515314
ASM JavaScripts (such as CSRF or CSHUI) are not injected, or they are injected in the wrong place in the code.
Page fails to load, application broken, or the script does not function.
A feature with JavaScript injection is configured and there is an apostrophe or quotation marks in the response page.
This issue has no workaround at this time.
We improved the way ASM parses responses so that it can better detect where to inject JavaScript when there are quotation marks or apostrophes.