PT-2025-23533 · Unknown+7 · Modsecurity+7

Airween · Published 2025-05-11 · Updated 2025-08-08 · CVE-2025-48866

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ModSecurity versions prior to 2.9.10

Description The issue is a denial of service vulnerability. It affects the sanitiseArg (and its alias sanitizeArg) action, which is vulnerable to adding an excessive number of arguments, leading to denial of service.

Recommendations For versions prior to 2.9.10, update to version 2.9.10 to resolve the issue. As a temporary workaround, avoid using rules that contain the sanitiseArg (or sanitizeArg) action.

Exploit

Fix

DoS

Weakness Enumeration

CWE-1050

Related Identifiers

AZL-62229

AZL-62231

BDU:2025-06497

BIT-MODSECURITY-2025-48866

BIT-MODSECURITY2-2025-48866

CVE-2025-48866

DLA-4212-1

DSA-5940-1

GHSA-859R-VVV8-RM8R

GHSA-F82J-8PP7-CW2W

INFSA-2025_12838

MGASA-2025-0192

OESA-2025-1676

OESA-2025-1750

OPENSUSE-SU-2025:15197-1

RHSA-2025:12838

RHSA-2025:13670

RHSA-2025:13716

RHSA-2025:13775

RHSA-2025_12838

SUSE-SU-2025:02028-1

SUSE-SU-2025:02029-1

SUSE-SU-2025:02052-1

SUSE-SU-2025_02028-1

SUSE-SU-2025_02029-1

SUSE-SU-2025_02052-1

USN-7567-1

Affected Products

Astra Linux

Debian

Linuxmint

Modsecurity

Red Hat

Rocky Linux

Suse

Ubuntu

References · 55

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/48xxx/CVE-2025-48866.json · Exploit
• https://github.com/owasp-modsecurity/ModSecurity/commit/3a54ccea62d3f7151bb08cb78d60c5e90b53ca2e · Patch
• https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-f82j-8pp7-cw2w · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02052-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1750 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-62229 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-48866 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-48866 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-12838.html · Vendor Advisory
• https://osv.dev/vulnerability/BIT-modsecurity-2025-48866 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02028-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52891 · Security Note
• https://osv.dev/vulnerability/BIT-modsecurity2-2025-48866 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-62231 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0192.html · Security Note