owasp-modsecurity

Records57All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high26CVSS 7.0–8.9

Exploited now

owasp-modsecurity records in CISA KEV

No owasp-modsecurity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Modsecurity 15 records HIGH Owasp Modsecurity Core Rule Set 9 records MEDIUM Enterprise Security Api 4 records HIGH Json-sanitizer 3 records MEDIUM Defectdojo 2 records MEDIUM Dependency-check 2 records MEDIUM Dependency-track 2 records LOW Java Html Sanitizer 2 records HIGH

Records

2 records in Dependency-check · all components

TI-2024-15704 CVE-2024-23686 · GHSA-frxm-v7q3-v2wv

DependencyCheck Debug Mode Logging of NVD API Key

MEDIUM 57

DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00603 Published 2024-01-19 Fixed in 9.0.6 CWE-532

TI-2018-08627 CVE-2018-12036 · GHSA-hcwx-7q5v-vc67

OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a…

LOW 37

OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01683 Published 2018-06-07 Fixed in 3.2.0 CWE-123

Open these records in search →

Critical	10
High	26
Medium	18
Low	3
No CVSS	0