Log in Start free

Vulnerability · Published Jan 20, 2023 · Assigned by mitre

CVE-2022-48279

High 7.5

In plain English

A high-severity security flaw in the modsecurity package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 69% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.2%top 31.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12modsecurity3.0.8-1DEBIAN-CVE-2022-48279
Debian:13modsecurity3.0.8-1DEBIAN-CVE-2022-48279
Debian:14modsecurity3.0.8-1DEBIAN-CVE-2022-48279
Debian:12modsecurity-apache2.9.6-1DEBIAN-CVE-2022-48279
Debian:13modsecurity-apache2.9.6-1DEBIAN-CVE-2022-48279
Debian:14modsecurity-apache2.9.6-1DEBIAN-CVE-2022-48279
Ubuntu:22.04:LTSmodsecurityno fix listedUBUNTU-CVE-2022-48279

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-436 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References