Security Advisory

CVE-2022-48279

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-01-20 00:00:00

Last updated 2025-04-03 18:43:26

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.

← Browse all CVEs View on cve.org ↗