OWASP ModSecurity Core Rule Set vulnerabilities

Newest CVEs

• CVE-2022-39958

  Response body bypass in OWASP ModSecurity Core Rule Set via repeated HTTP Range header submission with a small byte range

  OWASP · ModSecurity Core Rule Set

  High7.5
• CVE-2022-39957

  Response body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header

  OWASP · ModSecurity Core Rule Set

  High7.3
• CVE-2022-39956

  Partial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding header

  OWASP · ModSecurity Core Rule Set

  High7.3
• CVE-2022-39955

  Partial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type header

  OWASP · ModSecurity Core Rule Set

  High7.3