Skip to content
OpenAdvisories

Vendor

coreruleset

2 known vulnerabilities.

Products

coreruleset 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-33691

    OWASP CRS: Whitespace padding in filenames bypasses file upload extension checks

    The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.9 and 4.25.0, a bypass was identified in OWASP CRS that allows uploading files with dangerous extensions (.php, .…

    coreruleset coreruleset modsecurity-crs modsecurity-crs Debian Ubuntu