owasp-modsecurity

Records57All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high26CVSS 7.0–8.9

Exploited now

owasp-modsecurity records in CISA KEV

No owasp-modsecurity vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Json-sanitizer · all components

TI-2021-06251 CVE-2021-23899 · GHSA-mm8j-9x84-m9cv

MEDIUM 46

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02093 Published 2021-01-13 Fixed in 1.2.2 CWE-611

TI-2021-06252 CVE-2021-23900 · GHSA-8rf5-92jh-3vc9

LOW 37

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02125 Published 2021-01-13 Fixed in 1.2.2 CWE-248

TI-2020-10947 CVE-2020-13973 · GHSA-g8jj-899q-8x3j

LOW 29

OWASP json-sanitizer before 1.2.1 allows XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01123 Published 2020-06-09 Fixed in 1.2.1 CWE-79