CVE-2023-50969

2024-03-2823:15:46

[email protected]

web.nvd.nist.gov

thales imperva securesphere

waf bypass

crafted post request

remote attackers

vulnerability

9.3 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.9%

JSON

Thales Imperva SecureSphere WAF 14.7.0.40 allows remote attackers to bypass WAF rules via a crafted POST request, a different vulnerability than CVE-2021-45468.

References

docs.imperva.com/bundle/v14.7-waf-administration-guide/page/9282.htm

www.hoyahaxa.com/2024/03/imperva-waf-bypass-cve-2023-50969.html