High DLA-3283-1 2 CVEs

modsecurity-apache - security update

Published Jan 26, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	modsecurity-apache	2.9.3-1+deb10u2

Vulnerabilities 2

High 7.5

CVE-2022-48279

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the …

modsecurity modsecurity modsecurity-apache mod_security Debian Ubuntu Azure Linux

Jan 20, 2023
High 7.5

CVE-2023-24021

Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall byp…

modsecurity-apache mod_security modsecurity-apache Debian Ubuntu Azure Linux

Jan 20, 2023