CVE-2023-24021: Debian Linux
High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.
Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection.
Affected products
Published 2023-01-20. Last modified 2026-06-17.