Skip to content
OpenAdvisories

Package · Debian

modsecurity-apache

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-54571

    ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure

    ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type, which could lead to several issues depending on the HTTP sc…

    owasp-modsecurity ModSecurity modsecurity modsecurity-apache Debian Ubuntu
  • Medium 6.5
    CVE-2025-52891

    ModSecurity empty XML tag causes segmentation fault

    ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML tag can cause a segmentation fault. If SecParseXmlIntoArgs is set to On or OnlyArgs, and the reques…

    owasp-modsecurity ModSecurity modsecurity modsecurity-apache Debian Ubuntu