Owasp Modsecurity Modsecurity vulnerabilities

1 known vulnerability affecting owasp_modsecurity/modsecurity.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2024-1019HIGHCVSS 8.6≥ 3.0.0, ≤ 3.0.112024-01-30

CVE-2024-1019 [HIGH] CWE-20 CVE-2024-1019: ModSecurity / libModSecurity 3.0.0 to 3.0.11 is affected by a WAF bypass for path-based payloads sub ModSecurity / libModSecurity 3.0.0 to 3.0.11 is affected by a WAF bypass for path-based payloads submitted via specially crafted request URLs. ModSecurity v3 decodes percent-encoded characters present in request URLs before it separates the URL path component from the optional query string component. This results in an impedance mismatch versus RFC compl