Lucene search
+L

1 matches found

OSV
OSV
added 2025/03/20 6:48 p.m.11 views

GHSA-Q9F5-625G-XM39 OWASP Coraza WAF has parser confusion which leads to wrong URI in `REQUEST_FILENAME`

Summary URLs starting with // are not parsed properly, and the request REQUESTFILENAME variable contains a wrong value, leading to potential rules bypass. Details If a request is made on an URI starting with //, coraza will set a wrong value in REQUESTFILENAME. For example, if the URI...

5.4CVSS7.1AI score0.00307EPSS
SaveExploits0References4
Rows per page
Query Builder