VDB
BDU%3A2025-06497
BDU%3A2025-06497
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость конфигурации sanitiseArg и sanitizeArg межсетевого экрана для защиты веб-приложений ModSecurity, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| OWASP Foundation, Inc., ООО «НЦПР» | ModSecurity, МСВСфера |
Timeline
- Jun 9, 2025 CVE Published
- Nov 19, 2025 CVE Updated
References
- https://github.com/owasp-modsecurity/ModSecurity/wiki/Reference-Manual-(v2.x)#sanitisearg url
- https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-f82j-8pp7-cw2w url
- https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-859r-vvv8-rm8r url
- https://github.com/owasp-modsecurity/ModSecurity/commit/3a54ccea62d3f7151bb08cb78d60c5e90b53ca2e advisory
- https://github.com/owasp-modsecurity/ModSecurity/releases advisory
- https://errata.msvsphere-os.ru/definition/9/INFCSA-2025:12838?lang=ru advisory