Lucene search
+L

2 matches found

osv_ghsa
osv_ghsa
•added 2026/10/06 8:38 p.m.•29 views

GHSA-6R3Q-MJV7-XR8M Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding

Root Cause File: internal/corazawaf/transaction.go, lines 770–808 since commit 2fd87b89, PR 812, 2023-06-14 go func tx Transaction AddGetRequestArgumentkey string, value string if tx.checkArgumentLimittx.variables.argsGet tx.debugLogger.Warn.Msg"skipping get request argument, over limit" return...

7.2CVSS5.8AI score0.00378EPSS
SaveExploits0References6
Rows per page
Query Builder