apache-mod_security-crs vulnerabilities (Mageia)
7 vulnerabilities.
-
apache-mod_security-crsMageia Response body bypass in OWASP ModSecurity Core Rule Set via repeated HTTP Range header submission with a small byte range 7.5 High -
apache-mod_security-crsMageia Response body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header 7.3 High -
apache-mod_security-crsMageia Partial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding header 7.3 High -
apache-mod_security-crsMageia Partial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type header 7.3 High -
apache-mod_security-crsMageia Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass... 9.8 Critical -
apache-mod_security-crsMageia OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is... 9.8 Critical -
apache-mod_security-crsMageia A SQL injection bypass (aka PL1 bypass) exists in OWASP ModSecurity Core Rule Set (owasp... 7.5 High