Debian/modsecurity-apache: medium 6.1
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type,
Action: Upgrade modsecurity-apache to 2.9.7-1+deb12u2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.7-1+deb12u2 | - |
Fixed versions
| 2.9.7-1+deb12u2 |
Sources
published · modified · JSON