[Git][security-tracker-team/security-tracker][master] Add CVE-2025-48866/modsecurity-apache

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7e400323 by Salvatore Bonaccorso at 2025-06-02T22:25:51+02:00
Add CVE-2025-48866/modsecurity-apache

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -51,7 +51,9 @@ CVE-2025-48941 (MyBB is free and open source forum software. Prior to version 1.
 CVE-2025-48940 (MyBB is free and open source forum software. Prior to version 1.8.39,  ...)
 	NOT-FOR-US: MyBB
 CVE-2025-48866 (ModSecurity is an open source, cross platform web application firewall ...)
-	TODO: check
+	- modsecurity-apache <unfixed>
+	NOTE: https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-f82j-8pp7-cw2w
+	NOTE: Fixed by: https://github.com/owasp-modsecurity/ModSecurity/commit/3a54ccea62d3f7151bb08cb78d60c5e90b53ca2e (v2.9.10)
 CVE-2025-48745
 	REJECTED
 CVE-2025-48495 (Gokapi is a self-hosted file sharing server with automatic expiration  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7e40032368880200caa321ae2128a92e75433553

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7e40032368880200caa321ae2128a92e75433553
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250602/239d21e0/attachment.htm>