← Database

CVE-2023-24021

HIGH CVSS: 7.5 Published: 2023-01-20 Modified: 2026-06-17

Description

Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection.

Affected Platforms

Debian Debian LinuxTrustwave Modsecurity

Weakness Type

NVD-CWE-Other, CWE-170

References