coreruleset

Rama| Estado ---|--- main| 🛡️ OWASP CRS El OWASP CRS es un conjunto de reglas genéricas de detección de ataques para usar con OWASP ModSecurity, OWASP Coraza, u otros cortafuegos de aplicaciones web compatibles. El CRS tiene como objetivo proteger aplicaciones web de una amplia gama de ataques,...

owasp-modsecurity-crs

CRS se ha trasladado a un nuevo 🏠 ! El OWASP ModSecurity Core Rule Set CRS se ha trasladado a https://github.com/coreruleset/coreruleset. Una nota sobre este cambio: Este proyecto comenzó en Trustwave SpiderLabs hace más de diez años, fue creado con la idea de hacer un conjunto de reglas gratuito...

Linux Distros Unpatched Vulnerability : CVE-2023-38199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coreruleset aka OWASP ModSecurity Core Rule Set through 3.3.4 does not detect multiple Content-Type request headers on some platforms. This might allow attacker...

CVE-2023-38199

coreruleset aka OWASP ModSecurity Core Rule Set through 3.3.4 does not detect multiple Content-Type request headers on some platforms. This might allow attackers to bypass a WAF with a crafted payload, aka "Content-Type confusion" between the WAF and the backend application. This occurs when the...

Type confusion

coreruleset aka OWASP ModSecurity Core Rule Set through 3.3.4 does not detect multiple Content-Type request headers on some platforms. This might allow attackers to bypass a WAF with a crafted payload, aka "Content-Type confusion" between the WAF and the backend application. This occurs when the...

CVE-2023-38199

coreruleset aka OWASP ModSecurity Core Rule Set through 3.3.4 does not detect multiple Content-Type request headers on some platforms. This might allow attackers to bypass a WAF with a crafted payload, aka "Content-Type confusion" between the WAF and the backend application. This occurs when the...

CVE-2023-38199

coreruleset aka OWASP ModSecurity Core Rule Set through 3.3.4 does not detect multiple Content-Type request headers on some platforms. This might allow attackers to bypass a WAF with a crafted payload, aka "Content-Type confusion" between the WAF and the backend application. This occurs when the...

CVE-2023-38199: Access of Resource Using Incompatible Type

coreruleset aka OWASP ModSecurity Core Rule Set through 3.3.4 does not detect multiple Content-Type request headers on some platforms. This might allow attackers to bypass a WAF with a crafted payload, aka "Content-Type confusion" between the WAF and the backend application. This occurs when the...

CVE-2023-38199

coreruleset aka OWASP ModSecurity Core Rule Set through 3.3.4 does not detect multiple Content-Type request headers on some platforms. This might allow attackers to bypass a WAF with a crafted payload, aka "Content-Type confusion" between the WAF and the backend application. This occurs when the...