Two high-severity flaws have been disclosed in ModSecurity, the open-source web application firewall (WAF) used with Apache, IIS, and Nginx. Two GitHub advisories published by maintainer airween on September 30 describe flaws allowing malicious file uploads and server crashes that could lead to remote code execution. ModSecurity inspects web traffic and blocks requests that look […]
This article has been indexed from Cyber Security News
Read the original article:
ModSecurity Patches Two High-Severity Flaws Allowing WAF Bypass and Potential Remote Code Execution