Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rj75-2px6-36w6

Опубликовано: 03 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. Attackers can use the comment characters and variable assignments in the SQL syntax to bypass Modsecurity WAF protection and implement SQL injection attacks on Web applications.

Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. Attackers can use the comment characters and variable assignments in the SQL syntax to bypass Modsecurity WAF protection and implement SQL injection attacks on Web applications.

EPSS

Процентиль: 44%
0.00219
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 3 лет назад

Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. Attackers can use the comment characters and variable assignments in the SQL syntax to bypass Modsecurity WAF protection and implement SQL injection attacks on Web applications.

CVSS3: 9.8
nvd
больше 3 лет назад

Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. Attackers can use the comment characters and variable assignments in the SQL syntax to bypass Modsecurity WAF protection and implement SQL injection attacks on Web applications.

CVSS3: 9.8
debian
больше 3 лет назад

Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a ...

EPSS

Процентиль: 44%
0.00219
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89