CVE-2021-35368

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-35368
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-35368.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-35368
Downstream
Related
Published
2021-11-05T18:15:09.317Z
Modified
2026-04-02T07:00:23.177071Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by a Request Body Bypass via a trailing pathname.

References

Affected packages

Git / github.com/coreruleset/coreruleset

Affected ranges

Type
GIT
Repo
https://github.com/coreruleset/coreruleset
Events
Introduced
ab24a20faf28156f0495b0c07f2ff37860a3defe
Fixed
d3b116fce6c0dc8c8f6e4fbb4e3304af312b4812
Introduced
be34e996fe19078d5fd07e101af21bef1df59e2c
Fixed
3b12a9c2cf6f09559885b56f3acc0d7737f1eea5
Introduced
7776fe23f127fd2315bad0e400bdceb2cabb97dc
Fixed
18703f1bc47e9c4ec4096853d5fb4e2a204a07a2
Database specific 
{
    "versions": [
        {
            "introduced": "3.1.0"
        },
        {
            "fixed": "3.1.2"
        },
        {
            "introduced": "3.2.0"
        },
        {
            "fixed": "3.2.1"
        },
        {
            "introduced": "3.3.0"
        },
        {
            "fixed": "3.3.2"
        }
    ]
}

Affected versions

Other
nightly
v3.*
v3.1.0
v3.1.0-rc2
v3.1.1
v3.2.0
v3.3.0
v3.3.0-rc1
v3.3.0-rc2
v3.3.1-rc1
v4.*
v4.0.0
v4.0.0-rc1
v4.0.0-rc2
v4.1.0
v4.10.0
v4.11.0
v4.12.0
v4.13.0
v4.14.0
v4.15.0
v4.16.0
v4.17.0
v4.17.1
v4.18.0
v4.19.0
v4.2.0
v4.20.0
v4.21.0
v4.22.0
v4.23.0
v4.24.0
v4.24.1
v4.25.0
v4.3.0
v4.4.0
v4.5.0
v4.6.0
v4.7.0
v4.8.0
v4.9.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-35368.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "36"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "37"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    }
]