Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority MEDIUM 41

The OWASP ModSecurity Core Rule Set (CRS) is affected by a response body bypass to sequentially exfiltrate small and undetectable sections of data by repeatedly submitting an HTTP Range header field with a small byte ran…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01232 Published 2022-09-20 Will not fix CWE-863
Priority MEDIUM 50

The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass for HTTP multipart requests by submitting a payload that uses a character encoding scheme via the Content-Type or the deprecated Content-…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01212 Published 2022-09-20 Will not fix CWE-863
Priority MEDIUM 51

The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field that indicates multiple character encoding schemes.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01421 Published 2022-09-20 Will not fix CWE-863