OWASP ModSecurity Core Rule Set

• CVE-2022-39957 High 7.3 Response body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header 1.0%
• CVE-2022-39958 High 7.5 Response body bypass in OWASP ModSecurity Core Rule Set via repeated HTTP Range header submission with a small byte range 1.2%
• CVE-2022-39956 High 7.3 Partial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding header 1.2%
• CVE-2022-39955 High 7.3 Partial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type header 1.4%