Back to search
CVE-2023-24021
Published: Jan 20, 2023
Modified: Apr 2, 2025
PUBLISHED
Description
Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
FEDORA-2023-8aa264d5c5
vendor-advisory
FEDORA-2023-09f0496e60
vendor-advisory
FEDORA-2023-bc61f7a145
vendor-advisory
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now