Debian/modsecurity-apache: medium 6.1
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type,
Action: Upgrade modsecurity-apache to 2.9.12-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.12-2 | - |
Fixed versions
| 2.9.12-2 |
Sources
- osv: DEBIAN-CVE-2025-54571#Debian:14/modsecurity-apache
- https://security-tracker.debian.org/tracker/CVE-2025-54571
published · modified · JSON