DeutschShown in its original language — a full translation is planned for a future version.
OWASP ModSecurity: Schwachstelle ermöglicht Cross-Site Scripting
view advisory published 2025-08-05
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OWASP ModSecurity ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-54571US | medium6.1 | — | ||
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11
and below, an attacker can override the HTTP respo… | ||||
02
references
External citations — patches, advisories, analysis.
- Amazon Linux Security Advisory ALAS2-2025-2981 vom 2025-09-04external
- ModSecurity GitHub vom 2025-08-05external
- Debian Security Advisory DLA-4294 vom 2025-09-07external
- openSUSE Security Update OPENSUSE-SU-2025:15457-1 vom 2025-08-19external
- SUSE Security Update SUSE-SU-2025:03422-1 vom 2025-09-29external
- SUSE Security Update SUSE-SU-2025:03423-1 vom 2025-09-29external
- WID-SEC-W-2025-1721 - CSAF Versionself
- WID-SEC-2025-1721 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan