owasp Modsecurity Core Rule Set Vulnerabilities

Owasp Modsecurity Core Rule Set vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

20 September 2022

Partial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type header
CVE-2022-39955
OwaspModsecurity Core Rule Set7.3HIGH
Partial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding header
CVE-2022-39956
OwaspModsecurity Core Rule Set7.3HIGH
Response body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header
CVE-2022-39957
OwaspModsecurity Core Rule Set7.3HIGH
Response body bypass in OWASP ModSecurity Core Rule Set via repeated HTTP Range header submission with a small byte range
CVE-2022-39958
OwaspModsecurity Core Rule Set7.5HIGH

2 September 2022

SQL Injection Bypass Vulnerability in Modsecurity by SpiderLabs
CVE-2020-22669
OwaspOwasp Modsecurity Core...9.8CRITICAL

5 November 2021

Request Body Bypass Vulnerability in OWASP ModSecurity Core Rule Set
CVE-2021-35368
OwaspOwasp Modsecurity Core...9.8CRITICAL

3 September 2018

SQL Injection Bypass in OWASP ModSecurity Core Rule Set
CVE-2018-16384
OwaspOwasp Modsecurity Core...7.5HIGH