Security Advisory

CVE-2022-48279

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-01-20 00:00:00

Last updated 2025-04-03 18:43:26

Assigner mitre

State PUBLISHED

Description

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.

← Browse all CVEs View on cve.org ↗