ModSecurity 2.5.11 bypasses request filtering, enabling XSS attacks via single quote in Content-Disposition field of multipart/form-data request
Reporter | Title | Published | Views | Family All 17 |
---|---|---|---|---|
![]() | CVE-2009-5031 | 22 Jul 201216:55 | – | cve |
![]() | CVE-2012-2751 | 22 Jul 201216:55 | – | cve |
![]() | CVE-2009-5031 | 22 Jul 201200:00 | – | ubuntucve |
![]() | CVE-2009-5031 | 22 Jul 201216:00 | – | cvelist |
![]() | CVE-2012-2751 | 22 Jul 201216:00 | – | cvelist |
![]() | CVE-2009-5031 | 22 Jul 201216:55 | – | nvd |
![]() | CVE-2012-2751 | 22 Jul 201216:55 | – | nvd |
![]() | Cross site scripting | 22 Jul 201216:55 | – | prion |
![]() | Cross site scripting | 22 Jul 201216:55 | – | prion |
![]() | CVE-2012-2751 | 22 Jul 201216:55 | – | debiancve |
OS | OS Version | Architecture | Package | Package Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | modsecurity-apache | 2.9.7-1 | modsecurity-apache_2.9.7-1_all.deb |
Debian | 11 | all | modsecurity-apache | 2.9.3-3+deb11u2 | modsecurity-apache_2.9.3-3+deb11u2_all.deb |
Debian | 999 | all | modsecurity-apache | 2.9.8-1.1 | modsecurity-apache_2.9.8-1.1_all.deb |
Debian | 13 | all | modsecurity-apache | 2.9.8-1.1 | modsecurity-apache_2.9.8-1.1_all.deb |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo