Amazon Linux 2 : mod_security (ALAS-2023-2098)

The version of modsecurity installed on the remote host is prior to 2.9.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2098 advisory. In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the...

CVE-2023-2098

creationtimestamp| type| source ---|---|--- 2023-04-15 16:26:44+00:00| seen| https://t.me/cibsecurity/62228 2023-12-10 11:18:27+00:00| seen| https://t.me/arpsyndicate/1604...

CVE-2023-2098

CVE-2023-2098 affects SourceCodester Vehicle Service Management System 1.0. The vulnerability is an XSS in the file /inc/topBarNav.php caused by manipulation of the search parameter. It can be exploited remotely and the exploit has been disclosed publicly. Affected versions are not clearly enumer...