tocsin

Debian/modsecurity-apache: unknown

ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity d

Action: Upgrade modsecurity-apache to 2.6.6-6 or later.

Affected

introducedfixedlast affected
02.6.6-6-

Fixed versions

2.6.6-6

Sources

published · modified · JSON