{"id":"CVE-2022-48279","aliases":["AZL-43705","AZL-45216","BIT-modsecurity-2022-48279","BIT-modsecurity2-2022-48279","DEBIAN-CVE-2022-48279","DLA-3283-1","EUVD-2022-50981","GHSA-6fhx-fm6h-hpxq","MGASA-2023-0175","OESA-2024-1334","OESA-2024-1375","OESA-2024-1376","OESA-2024-1377","OESA-2024-1378","OESA-2024-1512","RHSA-2023:4629","SUSE-SU-2023:0314-1","SUSE-SU-2023:0317-1","SUSE-SU-2023:0318-1","UBUNTU-CVE-2022-48279","USN-6370-1","openSUSE-SU-2025:14703-1"],"status":"published","title":"In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed...","description":"In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01223,"percentile":0.6902,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-269","CWE-436"],"published":"2023-01-20T00:00:00Z","modified":"2026-11-03T06:03:13Z","fixes":[{"ecosystem":"Azure Linux:3","package":"mod_security","fixed_in":["2.9.7-8"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"modsecurity","fixed_in":["2.9.6"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"modsecurity2","fixed_in":["2.9.6"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"modsecurity","fixed_in":["3.0.8-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"modsecurity","fixed_in":["3.0.8-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"modsecurity","fixed_in":["3.0.8-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"modsecurity-apache","fixed_in":["2.9.6-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"modsecurity-apache","fixed_in":["2.9.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"modsecurity-apache","fixed_in":["2.9.6-1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"mod_security","fixed_in":["2.9.5-9.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"mod_security","fixed_in":["2.9.5-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"mod_security","fixed_in":["2.9.5-2.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"mod_security","fixed_in":["2.9.5-3.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"mod_security","fixed_in":["2.9.5-9.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"mod_security","fixed_in":["2.9.5-9.oe2203sp2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"apache2-mod_security2","fixed_in":["2.9.4-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"apache2-mod_security2","fixed_in":["2.9.4-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"apache2-mod_security2","fixed_in":["2.9.2-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"apache2-mod_security2","fixed_in":["2.8.0-7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"apache2-mod_security2","fixed_in":["2.8.0-7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"apache2-mod_security2","fixed_in":["2.8.0-7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"apache2-mod_security2","fixed_in":["2.8.0-7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"apache2-mod_security2","fixed_in":["2.8.0-7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"apache2-mod_security2","fixed_in":["2.8.0-7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"apache2-mod_security2","fixed_in":["2.8.0-7.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"modsecurity-apache","fixed_in":["2.7.7-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"modsecurity-apache","fixed_in":["2.9.0-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"modsecurity-apache","fixed_in":["2.9.2-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"modsecurity-apache","fixed_in":["2.9.3-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"modsecurity-apache","fixed_in":["2.9.5-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"apache2-mod_security2","fixed_in":["2.9.8-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.9.4-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-8"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"modsecurity","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.9.6"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"modsecurity2","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.9.6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"modsecurity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"modsecurity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"modsecurity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"modsecurity-apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"modsecurity-apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"modsecurity-apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.6-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"modsecurity-apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3-1+deb10u2"}]}],"versions":["2.9.3-1","2.9.3-1+deb10u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"apache-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-9.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-2.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-3.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-9.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-9.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-apr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-8.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-5.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-5.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-29.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-29.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-29.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_security-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-29.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el7jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.1-1.el8jbcs"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-7.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"modsecurity-apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.7-2ubuntu0.1~esm1"}]}],"versions":["2.7.4-1","2.7.5-1","2.7.7-1","2.7.7-1ubuntu1","2.7.7-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"modsecurity-apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-1ubuntu0.1~esm1"}]}],"versions":["2.9.0-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"modsecurity-apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-1ubuntu0.1~esm1"}]}],"versions":["2.9.1-3","2.9.2-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"modsecurity-apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3-1ubuntu0.1"}]}],"versions":["2.9.3-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"modsecurity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.3-1","3.0.4-1","3.0.4-1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"modsecurity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.4-2","3.0.6-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"modsecurity-apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-1ubuntu0.1~esm1"}]}],"versions":["2.9.3-3","2.9.5-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"modsecurity-apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.7-2ubuntu0.1~esm1"}]}],"versions":["2.7.4-1","2.7.5-1","2.7.7-1","2.7.7-1ubuntu1","2.7.7-2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"modsecurity-apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-1ubuntu0.1~esm1"}]}],"versions":["2.9.0-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"modsecurity-apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-1ubuntu0.1~esm1"}]}],"versions":["2.9.1-3","2.9.2-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"modsecurity-apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3-1ubuntu0.1"}]}],"versions":["2.9.3-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"modsecurity-apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-1ubuntu0.1~esm1"}]}],"versions":["2.9.3-3","2.9.5-1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache2-mod_security2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-2.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"owasp","product":"modsecurity"},{"vendor":"trustwave","product":"modsecurity"}],"references":[{"url":"https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.6","tags":["x_transferred","Release Notes","Third Party Advisory","advisory","web","report"]},{"url":"https://github.com/SpiderLabs/ModSecurity/pull/2797","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"https://github.com/SpiderLabs/ModSecurity/releases/tag/v3.0.8","tags":["x_transferred","Release Notes","Third Party Advisory","advisory","web","report"]},{"url":"https://github.com/SpiderLabs/ModSecurity/pull/2795","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"https://coreruleset.org/20220919/crs-version-3-3-3-and-3-2-2-covering-several-cves/","tags":["x_transferred","Not Applicable","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00023.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCH6JM4I4MD4YABYFHSBDDOUFDGIFJKL/","tags":["vendor-advisory","x_transferred","web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/52TGCZCOHYBDCVWJYNN2PS4QLOHCXWTQ/","tags":["vendor-advisory","x_transferred","web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYRTXTOQQI6SB2TLI5QXU76DURSLS4XI/","tags":["vendor-advisory","x_transferred","web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48279","tags":["web","advisory"]},{"url":"https://coreruleset.org/20220919/crs-version-3-3-3-and-3-2-2-covering-several-cves"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/52TGCZCOHYBDCVWJYNN2PS4QLOHCXWTQ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYRTXTOQQI6SB2TLI5QXU76DURSLS4XI"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCH6JM4I4MD4YABYFHSBDDOUFDGIFJKL"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/52TGCZCOHYBDCVWJYNN2PS4QLOHCXWTQ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SYRTXTOQQI6SB2TLI5QXU76DURSLS4XI"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCH6JM4I4MD4YABYFHSBDDOUFDGIFJKL"},{"url":"https://github.com/advisories/GHSA-6fhx-fm6h-hpxq"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48279.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-48279","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0175.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31457","tags":["report"]},{"url":"https://www.debian.org/lts/security/2023/dla-3283","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SYRTXTOQQI6SB2TLI5QXU76DURSLS4XI/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1334","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1375","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1376","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1377","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1378","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1512","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4629","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2176211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196793","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4629.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24963","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24963","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24963","tags":["advisory"]},{"url":"https://lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-36760","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-36760","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36760","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-36760","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-37436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-37436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37436","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-37436","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-48279","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-48279","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24021","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24021","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27522","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27522","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28319","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28319","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-28319.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28321","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28321","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28321","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-28321.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28322","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28322","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-28322.html","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230314-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207378","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48279","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230317-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230318-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-48279","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6370-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-42717","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-24021","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OZWMEONXBEG2RXU34HOPD6QSM3XZ5B3K/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-48279","description":"In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.","status":"published","published":"2023-01-20T00:00:00Z","modified":"2025-04-03T18:43:26.152Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-436"],"updated_at":"2026-11-02T14:34:33.913527Z"}],"euvd":[{"id":"EUVD-2022-50981","description":"In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.","status":"published","published":"2023-01-20T00:00:00Z","modified":"2025-04-03T18:43:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T20:52:43.340305Z"}],"ghsa":[{"id":"GHSA-6fhx-fm6h-hpxq","title":"In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed...","description":"In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.","status":"published","published":"2023-01-20T21:30:30Z","modified":"2025-04-03T21:33:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-269","CWE-436"],"updated_at":"2026-11-02T15:00:47.69533Z"}],"nvd":[{"id":"CVE-2022-48279","description":"In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.","status":"published","published":"2023-01-20T19:15:17.783Z","modified":"2026-06-17T05:14:54.08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-436"],"updated_at":"2026-11-02T14:07:35.157734Z"}],"osv":[{"id":"AZL-43705","title":"CVE-2022-48279 affecting package mod_security 2.9.4-1","description":"In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.","status":"published","published":"2023-01-20T19:15:17Z","modified":"2026-04-21T04:31:07.107274Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-45216","title":"CVE-2022-48279 affecting package mod_security for versions less than 2.9.7-8","description":"In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.","status":"published","published":"2023-01-20T19:15:17Z","modified":"2026-04-21T04:55:15.834325Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:05.694722Z"},{"id":"CVE-2022-48279","description":"In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.","status":"published","published":"2023-01-20T00:00:00Z","modified":"2026-10-28T02:31:08.455468205Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:27.776402Z"},{"id":"OESA-2024-1334","title":"mod_security security update","description":"This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information.\r\n\r\nSecurity Fix(es):\r\n\r\nIn ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)","status":"published","published":"2024-03-29T11:06:46Z","modified":"2026-08-18T01:18:20.109804199Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1375","title":"mod_security security update","description":"This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information.\r\n\r\nSecurity Fix(es):\r\n\r\nIn ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)","status":"published","published":"2024-04-12T11:06:49Z","modified":"2026-08-18T01:18:20.095091113Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1376","title":"mod_security security update","description":"This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information.\r\n\r\nSecurity Fix(es):\r\n\r\nIn ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)","status":"published","published":"2024-04-12T11:06:49Z","modified":"2026-08-18T01:18:20.344704177Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1377","title":"mod_security security update","description":"This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information.\r\n\r\nSecurity Fix(es):\r\n\r\nIn ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)","status":"published","published":"2024-04-12T11:06:49Z","modified":"2026-08-18T01:18:20.406119592Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1378","title":"mod_security security update","description":"This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information.\r\n\r\nSecurity Fix(es):\r\n\r\nIn ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)","status":"published","published":"2024-04-12T11:06:49Z","modified":"2026-08-18T01:18:20.412180497Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1512","title":"mod_security security update","description":"This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information.\r\n\r\nSecurity Fix(es):\r\n\r\nIn ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)","status":"published","published":"2024-04-26T11:06:57Z","modified":"2026-08-18T01:18:22.341199914Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"RHSA-2023:4629","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 security update","status":"published","published":"2024-09-13T23:26:54Z","modified":"2026-09-21T10:05:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"UBUNTU-CVE-2022-48279","description":"In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.","status":"published","published":"2023-01-20T19:15:00Z","modified":"2026-04-22T13:32:28.353875Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:53:56.473586Z"},{"id":"BIT-modsecurity-2022-48279","description":"In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.","status":"published","published":"2024-03-06T10:56:55.39Z","modified":"2026-09-08T08:48:13.826177286Z","updated_at":"2026-11-02T15:28:33.072289Z"},{"id":"BIT-modsecurity2-2022-48279","description":"In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.","status":"published","published":"2024-03-06T10:57:02.075Z","modified":"2026-09-08T08:48:13.93736305Z","updated_at":"2026-11-02T15:28:33.072289Z"},{"id":"DEBIAN-CVE-2022-48279","description":"In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.","status":"published","published":"2023-01-20T19:15:17.783Z","modified":"2026-11-03T06:03:13.037691697Z","updated_at":"2026-11-03T06:42:07.302733Z"},{"id":"DLA-3283-1","title":"modsecurity-apache - security update","status":"published","published":"2023-01-26T00:00:00Z","modified":"2026-03-09T01:21:55.804647Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2023-0175","title":"Updated apache-mod_security packages fix security vulnerability","description":"HTTP multipart requests were incorrectly parsed and could bypass the Web\nApplication Firewall (CVE-2022-48279)\nIncorrect handling of '\\0' bytes in file uploads in ModSecurity may allow\nfor Web Application Firewall bypasses and buffer over-reads on the Web\nApplication Firewall when executing rules that read the FILES_TMP_CONTENT\ncollection. (CVE-2023-24021)\n","status":"published","published":"2023-05-21T08:42:44Z","modified":"2026-04-16T04:44:01.535748965Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2025:14703-1","title":"apache2-mod_security2-2.9.8-2.1 on GA media","description":"These are all security issues fixed in the apache2-mod_security2-2.9.8-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-28T00:00:00Z","modified":"2026-02-04T04:06:30.887745Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2023:0314-1","title":"Security update for apache2-mod_security2","description":"This update for apache2-mod_security2 fixes the following issues:\n\n- CVE-2022-48279: Fixed a potential firewall bypass due to an\n  incorrect parsing of HTTP multipart requests (bsc#1207378).\n","status":"published","published":"2023-02-08T11:51:32Z","modified":"2026-02-04T02:21:54.11696Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0317-1","title":"Security update for apache2-mod_security2","description":"This update for apache2-mod_security2 fixes the following issues:\n\n- CVE-2022-48279: Fixed a potential firewall bypass due to an\n  incorrect parsing of HTTP multipart requests (bsc#1207378).\n","status":"published","published":"2023-02-08T14:26:20Z","modified":"2026-02-04T02:49:45.034017Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0318-1","title":"Security update for apache2-mod_security2","description":"This update for apache2-mod_security2 fixes the following issues:\n\n- CVE-2022-48279: Fixed a potential firewall bypass due to an\n  incorrect parsing of HTTP multipart requests (bsc#1207378).\n","status":"published","published":"2023-02-08T14:27:10Z","modified":"2026-02-04T04:31:22.821909Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-6370-1","title":"modsecurity-apache vulnerabilities","description":"It was discovered that ModSecurity incorrectly handled certain nested JSON\nobjects. An attacker could possibly use this issue to cause a denial\nof service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS\nand Ubuntu 20.04 LTS. (CVE-2021-42717)\n\nIt was discovered that ModSecurity incorrectly handled certain HTTP\nmultipart requests. A remote attacker could possibly use this issue\nto bypass ModSecurity restrictions. (CVE-2022-48279)\n\nIt was discovered that ModSecurity incorrectly handled certain file\nuploads. A remote attacker could possibly use this issue to cause a\nbuffer overflow and a firewall failure. This issue only affected\nUbuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.\n(CVE-2023-24021)\n","status":"published","published":"2023-09-14T14:06:25Z","modified":"2026-06-29T13:50:56.905907875Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}