Beveiligingsadvies

CVE-2023-40586

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-08-25 20:35:27

Laatst bijgewerkt 2024-10-02 14:41:35

Toegewezen door GitHub_M

CVSS-score 7.5

Status PUBLISHED

Beschrijving

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Due to the misuse of `log.Fatalf`, the application using coraza crashed after receiving crafted requests from attackers. The application will immediately crash after receiving a malicious request that triggers an error in `mime.ParseMediaType`. This issue was patched in version 3.0.1.

← Alle CVE's bekijken Bekijk op cve.org ↗