Skip to main content

Nginx Modsecurity Waf

1 CVEs product

Monthly

CVE-2021-42717 Dec 07, 22:15 HIGH POC PATCH This Week

ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Debian Oracle Nginx Debian Linux +7
NVD
CVSS 3.1
7.5
EPSS
3.2%
EPSS 3% CVSS 7.5
HIGH POC PATCH This Week

ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Debian Oracle +9
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy