| Package | Affected versions | Patched versions |
|---|---|---|
| web application firewall | < 2021-12-23 | 2021-12-23 |
Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade WAF security controls and send malicious HTTP POST requests to web servers behind the WAF.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free