CVE-2022-48279

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE:...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami modsecurity

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.9.6"}]}]

Bitnami modsecurity2

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.9.6"}]}]

ディストリビューション別の修正状況

各ディストリビューションが公開している、この CVE の修正パッケージ

Debian DEBIAN-CVE-2022-48279 modsecurity

参照URL

advisory github.com
advisory github.com
advisory github.com
advisory github.com
advisory lists.debian.org
web coreruleset.org
web lists.fedoraproject.org
web lists.fedoraproject.org
web lists.fedoraproject.org
web nvd.nist.gov