Known vulnerabilities in OWASP OWASP ModSecurity Core Rule Set (CRS) 3.0.1
Security bulletins (5)
| Secuity bulletin | Severity | Status | Published |
|---|---|---|---|
| SB2026010786: Multipart bypass using multiple content-type parts in ModSecurity Core Rule Set | Medium | 07.01.2026 | |
| SB2023072508: Type Confusion in coreruleset | Medium | 25.07.2023 | |
| SB2021070111: WAF ruleset bypass in OWASP ModSecurity Core Rule Set (CRS) | Medium | 01.07.2021 | |
| SB2019072816: Denial of service in OWASP ModSecurity Core Rule Set (CRS) | Medium | 28.07.2019 | |
| SB2019070929: File upload rules bypass in OWASP ModSecurity Core Rule Set (CRS) | Medium | 09.07.2019 |