owasp-modsecurity

Records57All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high26CVSS 7.0–8.9

Exploited now

owasp-modsecurity records in CISA KEV

No owasp-modsecurity vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Defectdojo · all components

TI-2026-03305 CVE-2026-3816 · GHSA-22w8-2mrr-vh7h

MEDIUM 57

A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00605 Published 2026-03-09 Fixed in 2.56.0 CWE-404

TI-2023-26060 CVE-2023-48171 · GHSA-wpgr-jvp4-g62h

MEDIUM 41

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00627 Published 2024-08-12 No fix listed CWE-269