OWASP ModSecurity Core Rule Set vulnerabilities
4 published CVEs name OWASP ModSecurity Core Rule Set among the affected products.
- 4Published CVEs4 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2022-39958
Response body bypass in OWASP ModSecurity Core Rule Set via repeated HTTP Range header submission with a small byte range
OWASP · ModSecurity Core Rule Set
High7.5 - CVE-2022-39957
Response body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header
OWASP · ModSecurity Core Rule Set
High7.3 - CVE-2022-39956
Partial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding header
OWASP · ModSecurity Core Rule Set
High7.3 - CVE-2022-39955
Partial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type header
OWASP · ModSecurity Core Rule Set
High7.3