Owasp · Owasp Modsecurity Core Rule Set · CVE-2021-35368
Name of the Vulnerable Software and Affected Versions:
OWASP ModSecurity Core Rule Set versions 3.1.x through 3.1.1
OWASP ModSecurity Core Rule Set versions 3.2.x through 3.2.0
OWASP ModSecurity Core Rule Set versions 3.3.x through 3.3.1
Description:
The issue is related to a Request Body Bypass via a trailing pathname, which affects the OWASP ModSecurity Core Rule Set. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.
Recommendations:
For versions 3.1.x through 3.1.1, update to version 3.1.2 or later.
For versions 3.2.x through 3.2.0, update to version 3.2.1 or later.
For versions 3.3.x through 3.3.1, update to version 3.3.2 or later.