Name of the Vulnerable Software and Affected Versions:

ModSecurity versions 2.9.11 and below

Description:

ModSecurity is a web application firewall engine for Apache, IIS, and Nginx. An attacker can override the HTTP response’s Content-Type, potentially leading to issues such as cross-site scripting (XSS) and arbitrary script source code disclosure.

Recommendations:

Update to version 2.9.12 or later.