Security Advisory

CVE-2023-40586

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-08-25 20:35:27

Last updated 2024-10-02 14:41:35

Assigner GitHub_M

CVSS score 7.5

State PUBLISHED

Description

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Due to the misuse of `log.Fatalf`, the application using coraza crashed after receiving crafted requests from attackers. The application will immediately crash after receiving a malicious request that triggers an error in `mime.ParseMediaType`. This issue was patched in version 3.0.1.

← Browse all CVEs View on cve.org ↗