Debian/modsecurity: high 8.6
ModSecurity / libModSecurity 3.0.0 to 3.0.11 is affected by a WAF bypass for path-based payloads submitted via specially crafted request URLs. ModSecurity v3 decodes percent-encoded characters present
Action: Upgrade modsecurity to 3.0.12-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.12-1 | - |
Fixed versions
| 3.0.12-1 |
Sources
- osv: DEBIAN-CVE-2024-1019#Debian:14/modsecurity
- https://security-tracker.debian.org/tracker/CVE-2024-1019
published · modified · JSON