CVE-2022-48279
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed...
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.
- Record
CVE-2022-48279- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-436
- Updated
- 2026-11-02
CVE List
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.
- Record
CVE-2022-48279- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-436
- Updated
- 2026-11-02
EUVDEUVD-2022-50981
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.
- Record
EUVD-2022-50981- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-6fhx-fm6h-hpxq
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed...
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.
- Record
GHSA-6fhx-fm6h-hpxq- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-269, CWE-436
- Updated
- 2026-11-02
OSVAZL-43705
CVE-2022-48279 affecting package mod_security 2.9.4-1
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.
- Record
AZL-43705- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVAZL-45216
CVE-2022-48279 affecting package mod_security for versions less than 2.9.7-8
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.
- Record
AZL-45216- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 18 moreShow less
OSV
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.
- Record
CVE-2022-48279- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2024-1334
mod_security security update
This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information.
Security Fix(es):
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)
- Record
OESA-2024-1334- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2024-1375
mod_security security update
This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information.
Security Fix(es):
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)
- Record
OESA-2024-1375- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2024-1376
mod_security security update
This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information.
Security Fix(es):
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)
- Record
OESA-2024-1376- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2024-1377
mod_security security update
This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information.
Security Fix(es):
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)
- Record
OESA-2024-1377- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2024-1378
mod_security security update
This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information.
Security Fix(es):
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)
- Record
OESA-2024-1378- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2024-1512
mod_security security update
This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information.
Security Fix(es):
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)
- Record
OESA-2024-1512- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2023:4629
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 security update
- Record
RHSA-2023:4629- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-48279
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.
- Record
UBUNTU-CVE-2022-48279- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVBIT-modsecurity-2022-48279 No score
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.
- Record
BIT-modsecurity-2022-48279- Updated
- 2026-11-02
OSVBIT-modsecurity2-2022-48279 No score
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.
- Record
BIT-modsecurity2-2022-48279- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-48279 No score
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.
- Record
DEBIAN-CVE-2022-48279- Updated
- 2026-11-03
OSVMGASA-2023-0175 No score
Updated apache-mod_security packages fix security vulnerability
HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall (CVE-2022-48279) Incorrect handling of '\0' bytes in file uploads in ModSecurity may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection. (CVE-2023-24021)
- Record
MGASA-2023-0175- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:14703-1 No score
apache2-mod_security2-2.9.8-2.1 on GA media
These are all security issues fixed in the apache2-mod_security2-2.9.8-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:14703-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0314-1 No score
Security update for apache2-mod_security2
This update for apache2-mod_security2 fixes the following issues:
- CVE-2022-48279: Fixed a potential firewall bypass due to an incorrect parsing of HTTP multipart requests (bsc#1207378).
- Record
SUSE-SU-2023:0314-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0317-1 No score
Security update for apache2-mod_security2
This update for apache2-mod_security2 fixes the following issues:
- CVE-2022-48279: Fixed a potential firewall bypass due to an incorrect parsing of HTTP multipart requests (bsc#1207378).
- Record
SUSE-SU-2023:0317-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0318-1 No score
Security update for apache2-mod_security2
This update for apache2-mod_security2 fixes the following issues:
- CVE-2022-48279: Fixed a potential firewall bypass due to an incorrect parsing of HTTP multipart requests (bsc#1207378).
- Record
SUSE-SU-2023:0318-1- Updated
- 2026-11-02
OSVUSN-6370-1 No score
modsecurity-apache vulnerabilities
It was discovered that ModSecurity incorrectly handled certain nested JSON objects. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-42717)
It was discovered that ModSecurity incorrectly handled certain HTTP multipart requests. A remote attacker could possibly use this issue to bypass ModSecurity restrictions. (CVE-2022-48279)
It was discovered that ModSecurity incorrectly handled certain file uploads. A remote attacker could possibly use this issue to cause a buffer overflow and a firewall failure. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-24021)
- Record
USN-6370-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mod_securityAzure Linux:2 |
through 2.9.4-1 | None known |
mod_securityAzure Linux:3 |
before 2.9.7-8 | 2.9.7-8 |
modsecurityBitnami |
before 2.9.6 | 2.9.6 |
modsecurity2Bitnami |
before 2.9.6 | 2.9.6 |
modsecurityDebian:12 |
before 3.0.8-1 | 3.0.8-1 |
modsecurityDebian:13 |
before 3.0.8-1 | 3.0.8-1 |
modsecurityDebian:14 |
before 3.0.8-1 | 3.0.8-1 |
modsecurity-apacheDebian:12 |
before 2.9.6-1 | 2.9.6-1 |
modsecurity-apacheDebian:13 |
before 2.9.6-1 | 2.9.6-1 |
modsecurity-apacheDebian:14 |
before 2.9.6-1 | 2.9.6-1 |
Show 91 moreShow less
| Package | Affected | Fixed |
|---|---|---|
modsecurity-apacheDebian:10 From an advisory covering 2 CVEs |
before 2.9.3-1+deb10u2, plus listed versions 2.9.3-12.9.3-1+deb10u1 |
2.9.3-1+deb10u2 |
apache-mod_securityMageia:8 From an advisory covering 2 CVEs |
before 2.9.7-1.mga8 | 2.9.7-1.mga8 |
mod_securityopenEuler:22.03-LTS-SP3 |
before 2.9.5-9.oe2203sp3 | 2.9.5-9.oe2203sp3 |
mod_securityopenEuler:20.03-LTS-SP1 |
before 2.9.5-2.oe1 | 2.9.5-2.oe1 |
mod_securityopenEuler:20.03-LTS-SP4 |
before 2.9.5-2.oe2003sp4 | 2.9.5-2.oe2003sp4 |
mod_securityopenEuler:22.03-LTS |
before 2.9.5-3.oe2203 | 2.9.5-3.oe2203 |
mod_securityopenEuler:22.03-LTS-SP1 |
before 2.9.5-9.oe2203sp1 | 2.9.5-9.oe2203sp1 |
mod_securityopenEuler:22.03-LTS-SP2 |
before 2.9.5-9.oe2203sp2 | 2.9.5-9.oe2203sp2 |
jbcs-httpd24-aprRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:1.7.0-8.el7jbcs | 0:1.7.0-8.el7jbcs |
jbcs-httpd24-apr-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:1.7.0-8.el7jbcs | 0:1.7.0-8.el7jbcs |
jbcs-httpd24-apr-develRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:1.7.0-8.el7jbcs | 0:1.7.0-8.el7jbcs |
jbcs-httpd24-aprRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:1.7.0-8.el8jbcs | 0:1.7.0-8.el8jbcs |
jbcs-httpd24-apr-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:1.7.0-8.el8jbcs | 0:1.7.0-8.el8jbcs |
jbcs-httpd24-apr-develRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:1.7.0-8.el8jbcs | 0:1.7.0-8.el8jbcs |
jbcs-httpd24-httpdRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el7jbcs | 0:2.4.57-5.el7jbcs |
jbcs-httpd24-httpd-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el7jbcs | 0:2.4.57-5.el7jbcs |
jbcs-httpd24-httpd-develRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el7jbcs | 0:2.4.57-5.el7jbcs |
jbcs-httpd24-httpd-manualRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el7jbcs | 0:2.4.57-5.el7jbcs |
jbcs-httpd24-httpd-selinuxRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el7jbcs | 0:2.4.57-5.el7jbcs |
jbcs-httpd24-httpd-toolsRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el7jbcs | 0:2.4.57-5.el7jbcs |
jbcs-httpd24-mod_ldapRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el7jbcs | 0:2.4.57-5.el7jbcs |
jbcs-httpd24-mod_proxy_htmlRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 1:2.4.57-5.el7jbcs | 1:2.4.57-5.el7jbcs |
jbcs-httpd24-mod_sessionRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el7jbcs | 0:2.4.57-5.el7jbcs |
jbcs-httpd24-mod_sslRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 1:2.4.57-5.el7jbcs | 1:2.4.57-5.el7jbcs |
jbcs-httpd24-httpdRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el8jbcs | 0:2.4.57-5.el8jbcs |
jbcs-httpd24-httpd-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el8jbcs | 0:2.4.57-5.el8jbcs |
jbcs-httpd24-httpd-develRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el8jbcs | 0:2.4.57-5.el8jbcs |
jbcs-httpd24-httpd-manualRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el8jbcs | 0:2.4.57-5.el8jbcs |
jbcs-httpd24-httpd-selinuxRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el8jbcs | 0:2.4.57-5.el8jbcs |
jbcs-httpd24-httpd-toolsRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el8jbcs | 0:2.4.57-5.el8jbcs |
jbcs-httpd24-httpd-tools-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el8jbcs | 0:2.4.57-5.el8jbcs |
jbcs-httpd24-mod_ldapRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el8jbcs | 0:2.4.57-5.el8jbcs |
jbcs-httpd24-mod_ldap-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el8jbcs | 0:2.4.57-5.el8jbcs |
jbcs-httpd24-mod_proxy_htmlRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 1:2.4.57-5.el8jbcs | 1:2.4.57-5.el8jbcs |
jbcs-httpd24-mod_proxy_html-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 1:2.4.57-5.el8jbcs | 1:2.4.57-5.el8jbcs |
jbcs-httpd24-mod_sessionRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el8jbcs | 0:2.4.57-5.el8jbcs |
jbcs-httpd24-mod_session-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:2.4.57-5.el8jbcs | 0:2.4.57-5.el8jbcs |
jbcs-httpd24-mod_sslRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 1:2.4.57-5.el8jbcs | 1:2.4.57-5.el8jbcs |
jbcs-httpd24-mod_ssl-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 1:2.4.57-5.el8jbcs | 1:2.4.57-5.el8jbcs |
jbcs-httpd24-mod_securityRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:2.9.3-29.el7jbcs | 0:2.9.3-29.el7jbcs |
jbcs-httpd24-mod_security-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:2.9.3-29.el7jbcs | 0:2.9.3-29.el7jbcs |
jbcs-httpd24-mod_securityRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:2.9.3-29.el8jbcs | 0:2.9.3-29.el8jbcs |
jbcs-httpd24-mod_security-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:2.9.3-29.el8jbcs | 0:2.9.3-29.el8jbcs |
jbcs-httpd24-curlRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:8.2.1-1.el7jbcs | 0:8.2.1-1.el7jbcs |
jbcs-httpd24-curl-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:8.2.1-1.el7jbcs | 0:8.2.1-1.el7jbcs |
jbcs-httpd24-libcurlRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:8.2.1-1.el7jbcs | 0:8.2.1-1.el7jbcs |
jbcs-httpd24-libcurl-develRed Hat:jboss_core_services:1::el7 From an advisory covering 9 CVEs |
before 0:8.2.1-1.el7jbcs | 0:8.2.1-1.el7jbcs |
jbcs-httpd24-curlRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:8.2.1-1.el8jbcs | 0:8.2.1-1.el8jbcs |
jbcs-httpd24-curl-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:8.2.1-1.el8jbcs | 0:8.2.1-1.el8jbcs |
jbcs-httpd24-libcurlRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:8.2.1-1.el8jbcs | 0:8.2.1-1.el8jbcs |
jbcs-httpd24-libcurl-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:8.2.1-1.el8jbcs | 0:8.2.1-1.el8jbcs |
jbcs-httpd24-libcurl-develRed Hat:jboss_core_services:1::el8 From an advisory covering 9 CVEs |
before 0:8.2.1-1.el8jbcs | 0:8.2.1-1.el8jbcs |
apache2-mod_security2SUSE:Linux Enterprise Module for Server Applications 15 SP4 |
before 2.9.4-150400.3.3.1 | 2.9.4-150400.3.3.1 |
apache2-mod_security2openSUSE:Leap 15.4 |
before 2.9.4-150400.3.3.1 | 2.9.4-150400.3.3.1 |
apache2-mod_security2SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Linux Enterprise Real Time 15 SP3 |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Linux Enterprise Server 15 SP1-LTSS |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Linux Enterprise Server 15 SP3-LTSS |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Manager Proxy 4.2 |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Manager Retail Branch Server 4.2 |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Manager Server 4.2 |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Enterprise Storage 6 |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Enterprise Storage 7 |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:Enterprise Storage 7.1 |
before 2.9.2-150000.3.6.1 | 2.9.2-150000.3.6.1 |
apache2-mod_security2SUSE:OpenStack Cloud 9 |
before 2.8.0-7.6.1 | 2.8.0-7.6.1 |
apache2-mod_security2SUSE:OpenStack Cloud Crowbar 9 |
before 2.8.0-7.6.1 | 2.8.0-7.6.1 |
apache2-mod_security2SUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 2.8.0-7.6.1 | 2.8.0-7.6.1 |
apache2-mod_security2SUSE:Linux Enterprise Server 12 SP2-BCL |
before 2.8.0-7.6.1 | 2.8.0-7.6.1 |
apache2-mod_security2SUSE:Linux Enterprise Server 12 SP4-LTSS |
before 2.8.0-7.6.1 | 2.8.0-7.6.1 |
apache2-mod_security2SUSE:Linux Enterprise Server 12 SP5 |
before 2.8.0-7.6.1 | 2.8.0-7.6.1 |
apache2-mod_security2SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2.8.0-7.6.1 | 2.8.0-7.6.1 |
modsecurity-apacheUbuntu:Pro:14.04:LTS |
before 2.7.7-2ubuntu0.1~esm1, plus listed versions 2.7.4-12.7.5-12.7.7-12.7.7-1ubuntu12.7.7-2 |
2.7.7-2ubuntu0.1~esm1 |
modsecurity-apacheUbuntu:Pro:16.04:LTS |
before 2.9.0-1ubuntu0.1~esm1, plus listed versions 2.9.0-1 |
2.9.0-1ubuntu0.1~esm1 |
modsecurity-apacheUbuntu:Pro:18.04:LTS |
before 2.9.2-1ubuntu0.1~esm1, plus listed versions 2.9.1-32.9.2-1 |
2.9.2-1ubuntu0.1~esm1 |
modsecurity-apacheUbuntu:20.04:LTS |
before 2.9.3-1ubuntu0.1, plus listed versions 2.9.3-1 |
2.9.3-1ubuntu0.1 |
modsecurityUbuntu:20.04:LTS |
All versions, plus listed versions 3.0.3-13.0.4-13.0.4-1build1 |
None known |
modsecurityUbuntu:22.04:LTS |
All versions, plus listed versions 3.0.4-23.0.6-1 |
None known |
modsecurity-apacheUbuntu:Pro:22.04:LTS |
before 2.9.5-1ubuntu0.1~esm1, plus listed versions 2.9.3-32.9.5-1 |
2.9.5-1ubuntu0.1~esm1 |
modsecurity-apacheUbuntu:Pro:14.04:LTS From an advisory covering 3 CVEs |
before 2.7.7-2ubuntu0.1~esm1, plus listed versions 2.7.4-12.7.5-12.7.7-12.7.7-1ubuntu12.7.7-2 |
2.7.7-2ubuntu0.1~esm1 |
modsecurity-apacheUbuntu:Pro:16.04:LTS From an advisory covering 3 CVEs |
before 2.9.0-1ubuntu0.1~esm1, plus listed versions 2.9.0-1 |
2.9.0-1ubuntu0.1~esm1 |
modsecurity-apacheUbuntu:Pro:18.04:LTS From an advisory covering 3 CVEs |
before 2.9.2-1ubuntu0.1~esm1, plus listed versions 2.9.1-32.9.2-1 |
2.9.2-1ubuntu0.1~esm1 |
modsecurity-apacheUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 2.9.3-1ubuntu0.1, plus listed versions 2.9.3-1 |
2.9.3-1ubuntu0.1 |
modsecurity-apacheUbuntu:Pro:22.04:LTS From an advisory covering 3 CVEs |
before 2.9.5-1ubuntu0.1~esm1, plus listed versions 2.9.3-32.9.5-1 |
2.9.5-1ubuntu0.1~esm1 |
apache2-mod_security2openSUSE:Tumbleweed |
before 2.9.8-2.1 | 2.9.8-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-48279 is a high vulnerability (CVSS 7.5) in Owasp Modsecurity, published January 20, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.22%, the 68th percentile. Fixed in mod_security 2.9.7-8.
References
github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.6
coreruleset.org/20220919/crs-version-3-3-3-and-3-2-2-covering-several-cves
lists.debian.org/debian-lts-announce/2023/01/msg00023.html
Show 73 moreShow less
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCH6JM4I4MD4YABYFHSBDDOUFDGIFJKL
nvd.nist.gov/vuln/detail/CVE-2022-48279
security-tracker.debian.org/tracker/CVE-2022-48279
advisories.mageia.org/MGASA-2023-0175.html
bugs.mageia.org/show_bug.cgi?id=31457
debian.org/lts/security/2023/dla-3283
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1334
access.redhat.com/errata/RHSA-2023:4629
bugzilla.redhat.com/show_bug.cgi?id=2161773
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4629.json
cve.org/CVERecord?id=CVE-2022-24963
lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9
httpd.apache.org/security/vulnerabilities_24.html
curl.se/docs/CVE-2023-28319.html
suse.com/support/update/announcement/2023/suse-su-20230314-1
bugzilla.suse.com/1207378
ubuntu.com/security/CVE-2022-48279
lists.opensuse.org/archives/list/[email protected]/thread/OZWMEONXBEG2RXU34HOPD6QSM3XZ5B3K