Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-24021
HistoryJan 20, 2023 - 7:15 p.m.

Design/Logic Flaw

2023-01-2019:15:00
PRIOn knowledge base
www.prio-n.com
10
modsecurity
web application firewall
file uploads
buffer over-reads

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

Incorrect handling of ‘\0’ bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection.

CPENameOperatorVersion
debian_linuxeq10.0
modsecuritylt2.9.7

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%