PT-2023-9179 · Unknown+6 · Modsecurity+6

Coldtobi · Published 2022-12-06 · Updated 2025-07-03 · CVE-2022-48279

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions ModSecurity versions prior to 2.9.6 ModSecurity versions 3.x prior to 3.0.8

Description The issue is related to the incorrect parsing of HTTP multipart requests, which could allow an attacker to bypass the Web Application Firewall. This is due to a flaw in the analysis of HTTP requests.

Recommendations For ModSecurity versions prior to 2.9.6, update to version 2.9.6 or later. For ModSecurity versions 3.x prior to 3.0.8, update to version 3.0.8 or later.

Fix

Weakness Enumeration

CWE-436

Related Identifiers

ALT-PU-2022-3292

ALT-PU-2023-1799

AZL-43705

AZL-45216

BDU:2024-04426

BIT-MODSECURITY-2022-48279

BIT-MODSECURITY2-2022-48279

CVE-2022-48279

DLA-3283-1

MGASA-2023-0175

OESA-2024-1334

OESA-2024-1375

OESA-2024-1376

OESA-2024-1377

OESA-2024-1378

OESA-2024-1512

OPENSUSE-SU-2023_0314-1

OPENSUSE-SU-2025:14703-1

RHSA-2023:4629

SUSE-SU-2023:0314-1

SUSE-SU-2023:0317-1

SUSE-SU-2023:0318-1

SUSE-SU-2023_0314-1

SUSE-SU-2023_0317-1

SUSE-SU-2023_0318-1

USN-6370-1

Affected Products

Alt Linux

Debian

Linuxmint

Modsecurity

Red Os

Suse

Ubuntu

References · 56

• https://github.com/SpiderLabs/ModSecurity/pull/2797 · Patch
• https://github.com/SpiderLabs/ModSecurity/pull/2795 · Patch
• https://osv.dev/vulnerability/OESA-2024-1378 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1334 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-04426 · Security Note
• https://osv.dev/vulnerability/CVE-2022-48279 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-48279 · Security Note
• https://ubuntu.com/security/notices/USN-6370-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCH6JM4I4MD4YABYFHSBDDOUFDGIFJKL · Vendor Advisory
• https://osv.dev/vulnerability/AZL-43705 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6370-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48279 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/52TGCZCOHYBDCVWJYNN2PS4QLOHCXWTQ · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1377 · Vendor Advisory
• https://debian.org/lts/security/2023/dla-3283 · Vendor Advisory