OM
Product
Owasp Modsecurity Core Rule Set
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 1Low 0
Watch
Add Owasp Modsecurity Core Rule Set to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33691 | 7.5 | Apr 2 | OWASP CRS: Whitespace padding in filenames bypasses file upload extension checks Affected: before 3.3.9; 4.0.0 before 4.25.0 |
| CVE-2022-39958 | 7.5 | Sep 20 | The OWASP ModSecurity Core Rule Set (CRS) is affected by a response body bypass to sequentially exfiltrate small and undetectable sections of data by repeatedly submitting an HTTP… Affected: 3.0.0 before 3.2.2; 3.3.0 before 3.3.3 |
| CVE-2022-39957 | 7.5 | Sep 20 | The OWASP ModSecurity Core Rule Set (CRS) is affected by a response body bypass Affected: 3.0.0 before 3.2.2; 3.3.0 before 3.3.3 |
| CVE-2018-16384 | 7.5 | Sep 3 | A SQL injection bypass (aka PL1 bypass) exists in OWASP ModSecurity Core Rule Set (owasp-modsecurity-crs) through v3.1.0-rc3 via {`a`b} where a is a special function name (such as… Affected: through 3.0.2; 3.1.0; 3.1.0 |
Showing 4