5 matches found
Coraza: URL-encoded Form Content-Type Parameters Bypass Coraza Body Inspection
Summary Coraza fails to inspect URL-encoded form bodies when their valid "Content-Type" contains a media-type parameter, for example: Content-Type: application/x-www-form-urlencoded; charset=UTF-8 An unauthenticated attacker can use this header to hide the complete form body from custom Coraza...
GHSA-W253-M66G-RX24 Coraza: URL-encoded form Content-Type parameters bypass Coraza body inspection
Summary Coraza fails to inspect URL-encoded form bodies when their valid Content-Type contains a media-type parameter, for example: http Content-Type: application/x-www-form-urlencoded; charset=UTF-8 An unauthenticated attacker can use this header to hide the complete form body from custom Coraza...
CVE-2026-73857
GHSA-jx3r-phvx-2jmj: XML request body processor dereferences an uninitialized parser context pointer...
