Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2022-48279
HistoryJan 20, 2023 - 12:00 a.m.

CVE-2022-48279

2023-01-2000:00:00
mitre
www.cve.org
modsecurity
bypass
http
multipart
parsing
vulnerability

8.8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.5%

JSON

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.

Related

nvd 2
nessus 24
amazon 3
osv 7
prion 2
redhatcve 2
ubuntucve 2
cve 2
debiancve 2
debian 2
openvas 20
veracode 2
cvelist 1
redos 1
mageia 2
fedora 9
ubuntu 1
gentoo 1
redhat 2
nvd
nvd
CVE-2022-48279
2023-01-20 19:15:17
CVE-2022-39956
2022-09-20 07:15:12
nessus
nessus
SUSE SLES12 Security Update : apache2-mod_security2 (SUSE-SU-2023:0318-1)
2023-02-14 00:00:00
SUSE SLES15 Security Update : apache2-mod_security2 (SUSE-SU-2023:0317-1)
2023-02-14 00:00:00
Amazon Linux AMI : mod_security (ALAS-2023-1763)
2023-06-09 00:00:00
amazon
amazon
Medium: mod_security
2023-06-05 16:39:00
Medium: mod24_security
2023-06-21 19:11:00
Important: mod_security
2023-06-21 19:11:00
osv
osv
CVE-2022-48279
2023-01-20 19:15:17
BIT-modsecurity2-2022-48279
2024-03-06 10:57:02
BIT-modsecurity-2022-48279
2024-03-06 10:56:55
prion
prion
Code injection
2023-01-20 19:15:00
Design/Logic Flaw
2022-09-20 07:15:00
redhatcve
redhatcve
CVE-2022-48279
2023-01-24 05:36:43
CVE-2022-39956
2022-09-30 17:18:57
ubuntucve
ubuntucve
CVE-2022-48279
2023-01-20 00:00:00
CVE-2022-39956
2022-09-20 00:00:00
cve
cve
CVE-2022-48279
2023-01-20 19:15:17
CVE-2022-39956
2022-09-20 07:15:12
debiancve
debiancve
CVE-2022-48279
2023-01-20 19:15:17
CVE-2022-39956
2022-09-20 07:15:12
debian
debian
[SECURITY] [DLA 3283-1] modsecurity-apache security update
2023-01-26 18:46:06
[SECURITY] [DLA 3293-1] modsecurity-crs security update
2023-01-30 18:35:25
openvas
openvas
Debian: Security Advisory (DLA-3283-1)
2023-01-27 00:00:00
Huawei EulerOS: Security Advisory for mod_security (EulerOS-SA-2023-1601)
2023-04-13 00:00:00
Huawei EulerOS: Security Advisory for mod_security (EulerOS-SA-2023-2160)
2023-06-09 00:00:00
veracode
veracode
Authorization Bypass
2022-10-10 21:08:58
WAF Bypass
2023-09-18 14:00:26
cvelist
cvelist
CVE-2022-39956 Partial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding header
2022-09-20 00:00:00
redos
redos
ROS-20240606-07
2024-06-06 00:00:00
mageia
mageia
Updated apache-mod_security packages fix security vulnerability
2023-05-21 11:42:44
Updated apache-mod_security-crs packages fix security vulnerabilities
2024-03-18 19:12:23
fedora
fedora
[SECURITY] Fedora 36 Update: mod_security-2.9.7-1.fc36
2023-04-22 01:12:59
[SECURITY] Fedora 38 Update: mod_security-2.9.7-1.fc38
2023-04-22 00:49:48
[SECURITY] Fedora 37 Update: mod_security-2.9.7-1.fc37
2023-04-22 00:56:28
ubuntu
ubuntu
ModSecurity vulnerabilities
2023-09-14 00:00:00
gentoo
gentoo
OWASP ModSecurity Core Rule Set: Multiple Vulnerabilities
2023-05-21 00:00:00
redhat
redhat
(RHSA-2023:4629) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 security update
2023-08-15 17:35:29
(RHSA-2023:4628) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 security update
2023-08-15 17:35:26

8.8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.5%

JSON
Related for CVELIST:CVE-2022-48279
nvd2nessus24amazon3osv7prion2redhatcve2ubuntucve2cve2debiancve2debian2openvas20veracode2cvelist1redos1mageia2fedora9ubuntu1gentoo1redhat2