5 matches found
CVE-2026-104259
GHSA-qrch-pjfr-9g47: t:removeComments mishandles the character after a comment terminator, bypassing rules...
5.8AI score
SaveExploits0References3
UBUNTU-CVE-2026-104259
GHSA-qrch-pjfr-9g47: t:removeComments mishandles the character after a comment terminator, bypassing rules...
5.8AI score
SaveExploits0References4
PT-2026-115364
GHSA-qrch-pjfr-9g47: t:removeComments mishandles the character after a comment terminator, bypassing rules...
5.8AI score
SaveExploits0References7
WS-2026-0088
In OWASP ModSecurity, the t:removeComments transformation fails to strip a second comment that directly follows the first and reads one byte past the buffer, letting SQLi/XSS payloads hidden in adjacent comments bypass rules. Affects v2 2.6.2-rc1 through 2.9.14 fixed 2.9.15 and v3 3.0.0-rc1 throu...
6.3CVSS5.9AI score
SaveExploits0References2
20