CyberRota Analysis
AI-GeneratedThe vulnerability affects ModSecurity versions 3.0.0 to 3.0.15 on i386 architecture, where the t:utf8toUnicode transformation can produce incorrect output, potentially allowing attackers to bypass security rules. This flaw poses a medium risk, as it may compromise the effectiveness of web application firewalls on affected systems. Organizations using ModSecurity on i386 architecture should prioritize upgrading to version 3.0.16 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 through 3.0.15, the t:utf8toUnicode transformation in src/actions/transformations/utf8_to_unicode.cc produces wrong output on i386 architecture because snprintf uses sizeof on a char pointer rather than the length of the unicode buffer, allowing rules that use this transformation to be bypassed on i386 architecture. This issue is fixed in version 3.0.16.
Related CVEs
Other vulnerabilities affecting the same vendor(s)