CVE-2022-29956

CVE-2022-29956 is associated with OWASP ModSecurity Core Rule Set (CRS) vulnerabilities. Affected versions: CRS 3.0.x–3.3.2. The issues enable partial rule-set bypasses (e.g., HTTP Content-Type charset handling and multipart payloads) that can allow evasion of WAF protections. Debian’s DLA-3293-1...