3 matches found
Coraza - Web Application Firewall input validation error vulnerability
Coraza – Versions prior to 3.8.1 contain an input validation error vulnerability. This occurs because when using Go’s mime.ParseMediaType to extract filenames from multipart uploads, the RFC 5987 filename parameter is silently ignored if its character set is not utf-8 or us-ascii. Unauthenticated...
6.3CVSS5.9AI score0.00251EPSS
SaveExploits1References2
20