PT-2025-22442 · Unknown+8 · Modsecurity+8
Studersi
·
Published
2025-05-21
·
Updated
2025-07-01
·
CVE-2025-47947
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
ModSecurity versions up to and including 2.9.8
Description
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. The issue arises when the payload's content type is
application/json, and there is at least one rule which does a sanitiseMatchedBytes action, leading to a denial of service.Recommendations
For versions up to and including 2.9.8, update to version 2.9.9, which is expected to include the patch available at pull request 3389.
As a temporary workaround, consider disabling rules that perform the
sanitiseMatchedBytes action when the payload's content type is application/json until a patch is available.Exploit
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Centos
Debian
Linuxmint
Modsecurity
Red Hat
Rocky Linux
Suse
Ubuntu