Huawei EulerOS: CVE-2022-48279: mod_security security update

Huawei EulerOS: CVE-2022-48279: mod_security security update

Severity

8

CVSS

(AV:N/AC:L/Au:N/C:C/I:N/A:N)

Published

01/20/2023

Created

06/09/2023

Added

06/09/2023

Modified

01/28/2025

Description

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.

Solution(s)

• huawei-euleros-2_0_sp5-upgrade-mod_security

References

• https://attackerkb.com/topics/cve-2022-48279
• CVE - 2022-48279
• EulerOS-SA-2023-2160