v3.0.14

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2025-02-25 14:32 UTC
  • Importiert: 2026-07-02 19:53 UTC
  • CVSS: 7.9
  • Quelle-ID: owasp_modsecurity
  • uid_hash: 3816cebb5f36cde9f9b551c28a18dbe58597642d841d9ca58c58656b124e15b4

Inhalt

Major changes in v3:

changed t:htmlEntityDecode transformation; fixed CVE-2025-27110

add value checking to @validateByteRange operator

fixed build library on OSX without GeoIP brew package

aligned TIME_MON variable's behavior

Leverage std::make_unique & std::make_shared to create objects in the heap

Simplified handling of RuleMessage by removing usage of std::shared_ptr

Simplified constructors, copy constructors & assignment operators

For more information please see CHANGES.

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2025-27110

HIGH

7.9

HIGH

7.9

2025-02-25

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
OWASP ModSecurity Releases

owasp_modsecurity

vendor_advisory waf, modsecurity, owasp - de https://github.com/owasp-modsecurity/ModSecurity/releases.atom