CVE-2022-48279
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE:...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.
Paquets affectés
Bitnami
modsecurity
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.9.6"}]}]
Bitnami
modsecurity2
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.9.6"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-48279 modsecurity
Références
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- patch github.com
- web coreruleset.org
- web github.com
- web github.com
- web lists.debian.org