Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-28882
7.5
HIGHCVSS v3
Published
April 28, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash and unresponsiveness) because some inputs cause a segfault in the Transaction class for some configurations.
owasp-modsecurity/ModSecurity
GitHubModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
GitHubModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.= *, >= 3.0.5, < 3.0.9NVD