Vulnerability Details : CVE-2023-24021
Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection.
Products affected by CVE-2023-24021
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:a:trustwave:modsecurity:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-24021
0.22%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 60 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-24021
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
3.9
|
3.6
|
NIST |
References for CVE-2023-24021
-
https://github.com/SpiderLabs/ModSecurity/pull/2857
Fix: FILES_TMP_CONTENT may sometimes lack complete content by martinhsv · Pull Request #2857 · SpiderLabs/ModSecurity · GitHubIssue Tracking;Patch
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/52TGCZCOHYBDCVWJYNN2PS4QLOHCXWTQ/
[SECURITY] Fedora 37 Update: mod_security-2.9.7-1.fc37 - package-announce - Fedora Mailing-Lists
-
https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.7
Release v2.9.7 · SpiderLabs/ModSecurity · GitHubRelease Notes
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCH6JM4I4MD4YABYFHSBDDOUFDGIFJKL/
[SECURITY] Fedora 36 Update: mod_security-2.9.7-1.fc36 - package-announce - Fedora Mailing-Lists
-
https://github.com/SpiderLabs/ModSecurity/pull/2857/commits/4324f0ac59f8225aa44bc5034df60dbeccd1d334
Fix: FILES_TMP_CONTENT may sometimes lack complete content by martinhsv · Pull Request #2857 · SpiderLabs/ModSecurity · GitHubPatch
-
https://lists.debian.org/debian-lts-announce/2023/01/msg00023.html
[SECURITY] [DLA 3283-1] modsecurity-apache security updateMailing List;Third Party Advisory
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SYRTXTOQQI6SB2TLI5QXU76DURSLS4XI/
[SECURITY] Fedora 38 Update: mod_security-2.9.7-1.fc38 - package-announce - Fedora Mailing-Lists
Jump to