Debian/modsecurity-apache: medium 6.1
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type,
Action: Upgrade modsecurity-apache to 2.9.11-1+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.11-1+deb13u1 | - |
Fixed versions
| 2.9.11-1+deb13u1 |
Sources
- osv: DEBIAN-CVE-2025-54571#Debian:13/modsecurity-apache
- https://security-tracker.debian.org/tracker/CVE-2025-54571
published · modified · JSON