Beveiligingsadvies

CVE-2020-22669

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-09-02 00:00:00
Laatst bijgewerkt 2025-11-03 19:25:32
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. Attackers can use the comment characters and variable assignments in the SQL syntax to bypass Modsecurity WAF protection and implement SQL injection attacks on Web applications.