Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HOwasp Modsecurity
APPOwasp3.0.0 – 3.0.10 (bez)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
Related vulnerabilities
CVE-2026-42268HIGH8.2ten sam produkt
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx....
CVE-2026-30923HIGH8.2ten sam produkt
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx....
CVE-2025-48866HIGH7.5ten sam produkt
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx....
CVE-2024-1019HIGH8.6ten sam produkt
ModSecurity / libModSecurity 3.0.0 to 3.0.11 is affected by a WAF bypass for path-based payloads submitted via...
CVE-2023-28882HIGH7.5ten sam produkt
Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash and unresponsi...