PT-2023-9179 · Unknown+6 · Modsecurity+6

Coldtobi · Publicado 2022-12-06 · Atualizado 2025-07-03 · CVE-2022-48279

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions ModSecurity versions prior to 2.9.6 ModSecurity versions 3.x prior to 3.0.8

Description The issue is related to the incorrect parsing of HTTP multipart requests, which could allow an attacker to bypass the Web Application Firewall. This is due to a flaw in the analysis of HTTP requests.

Recommendations For ModSecurity versions prior to 2.9.6, update to version 2.9.6 or later. For ModSecurity versions 3.x prior to 3.0.8, update to version 3.0.8 or later.

Correção

Enumeração de Fraquezas

CWE-436

Identificadores relacionados

ALT-PU-2022-3292

ALT-PU-2023-1799

AZL-43705

AZL-45216

BDU:2024-04426

BIT-MODSECURITY-2022-48279

BIT-MODSECURITY2-2022-48279

CVE-2022-48279

DLA-3283-1

MGASA-2023-0175

OESA-2024-1334

OESA-2024-1375

OESA-2024-1376

OESA-2024-1377

OESA-2024-1378

OESA-2024-1512

OPENSUSE-SU-2023_0314-1

OPENSUSE-SU-2025:14703-1

RHSA-2023:4629

SUSE-SU-2023:0314-1

SUSE-SU-2023:0317-1

SUSE-SU-2023:0318-1

SUSE-SU-2023_0314-1

SUSE-SU-2023_0317-1

SUSE-SU-2023_0318-1

USN-6370-1

Produtos afetados

Alt Linux

Debian

Linuxmint

Modsecurity

Red Os

Suse

Ubuntu

Referências · 56

• https://github.com/SpiderLabs/ModSecurity/pull/2797 · Correção
• https://github.com/SpiderLabs/ModSecurity/pull/2795 · Correção
• https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.6 · Nota
• https://github.com/SpiderLabs/ModSecurity/releases/tag/v3.0.8 · Nota
• https://osv.dev/vulnerability/OESA-2024-1378 · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2024-1334 · Aviso do Fabricante
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1334 · Nota
• https://bdu.fstec.ru/vul/2024-04426 · Nota de Segurança
• https://suse.com/support/update/announcement/2023/suse-su-20230318-1 · Nota
• https://osv.dev/vulnerability/CVE-2022-48279 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2022-48279 · Nota de Segurança
• https://lists.opensuse.org/archives/list/[e-mail]/thread/OZWMEONXBEG2RXU34HOPD6QSM3XZ5B3K · Nota
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1375 · Nota
• https://ubuntu.com/security/notices/USN-6370-1 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCH6JM4I4MD4YABYFHSBDDOUFDGIFJKL · Aviso do Fabricante