CVE-2025-27110

概要

参考情報

• owasp-modsecurity/ModSecurity · Exploit
• owasp-modsecurity/ModSecurity security advisory · Vendor Advisory

modsecurity のその他の脆弱性

• CVE-2025-47947高 7.5ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including …
• CVE-2024-46292高 7.5A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name para…
• CVE-2023-24021高 7.5Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over…
• CVE-2022-48279高 7.5In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firew…
• CVE-2021-42717高 7.5ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could res…