Advisories · Technology
OWASP ModSecurity Core Rule Set.
Every CVE that names OWASP ModSecurity Core Rule Set among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Response body bypass in OWASP ModSecurity Core Rule Set via repeated HTTP Range header submission with a small byte range
- OWASP ModSecurity Core Rule Set
- Broken access control
- CVSS 7.3 High
Response body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header
- OWASP ModSecurity Core Rule Set
- CWE-693
- CVSS 7.3 High
Partial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding header
- OWASP ModSecurity Core Rule Set
- Broken access control
- CVSS 7.3 High
Partial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type header
- OWASP ModSecurity Core Rule Set
- Broken access control