CyberSecBulletin

Modsecurity vulnerabilities

We track 1 vulnerability in Modsecurity products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 9, 2024.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Modsecurity vulnerabilities

  • 7.5 High severity

    modsecurity: Buffer Copy without Checking Size of Input

    CVE-2024-46292Modsecurity

    A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name parameter. NOTE: this is disputed by the Supplier because it cannot be reproduced. Also, the product's documentation indicat