modsecurity-crs vulnerabilities (Ubuntu)
12 vulnerabilities.
-
modsecurity-crsUbuntu OWASP CRS: Whitespace padding in filenames bypasses file upload extension checks 6.8 Medium -
modsecurity-crsUbuntu OWASP CRS has multipart bypass using multiple content-type parts 9.3 Critical -
modsecurity-crsUbuntu coreruleset (aka OWASP ModSecurity Core Rule Set) through 3.3.4 does not block multiple Content... 9.8 Critical -
modsecurity-crsUbuntu Response body bypass in OWASP ModSecurity Core Rule Set via repeated HTTP Range header submission with a small byte range 7.5 High -
modsecurity-crsUbuntu Response body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header 7.3 High -
modsecurity-crsUbuntu Partial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding header 7.3 High -
modsecurity-crsUbuntu Partial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type header 7.3 High -
modsecurity-crsUbuntu Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass... 9.8 Critical -
modsecurity-crsUbuntu OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is... 9.8 Critical -
modsecurity-crsUbuntu An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead... 7.5 High -
modsecurity-crsUbuntu An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST... 5.3 Medium -
modsecurity-crsUbuntu A SQL injection bypass (aka PL1 bypass) exists in OWASP ModSecurity Core Rule Set (owasp... 7.5 High