NetSight
IP …
critical9.8

CVE-2021-35368

OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by a Request Body Bypass via a trailing pathname.

Impact

OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by a Request Body Bypass via a trailing pathname.

Affected products

VendorProductAffected versions
OwaspOwasp Modsecurity Core Rule Set
from 3.1.0 before 3.1.2
from 3.2.0 before 3.2.1
from 3.3.0 before 3.3.2
FedoraprojectFedora
Versions 36, 37
DebianDebian Linux
Version 10.0

References