Astra Linux – vulnerability in modsecurity-apache

ModSecurity is an open source, cross-platform web application firewall WAF engine for Apache, IIS, and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service under a specific condition: when the payload’s content type is application/json, and there exists at least one rule...