2023-01-20 00:00:00
mitre
PUBLISHED
Incorrect handling of 0 bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection.