<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: owasp-modsecurity-core-rule-set</title><description>Every new CVE for owasp-modsecurity-core-rule-set.</description><link>https://agentprime.io/</link><item><title>CVE-2022-39958: Response body bypass in OWASP ModSecurity Core Rule Set via repeated HTTP Range header submission with a small byte range</title><link>https://agentprime.io/advisories/CVE-2022-39958/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-39958/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Sep 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-39957: Response body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header</title><link>https://agentprime.io/advisories/CVE-2022-39957/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-39957/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Sep 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-39956: Partial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding header</title><link>https://agentprime.io/advisories/CVE-2022-39956/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-39956/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Sep 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-39955: Partial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type header</title><link>https://agentprime.io/advisories/CVE-2022-39955/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-39955/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Sep 2022 00:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>