CVE-2026-52747 — ModSecurity is an open source, cross platform web...

windowsnginx CWE-180 高危 Apache CVE-2026-52747

发布于：1小时前📖 3分钟👁️ 1 次阅读

CVE-2026-52747 漏洞深度分析

漏洞概述

CVE 编号： CVE-2026-52747
CVSS 评分： 8.6（HIGH）
CVSS 向量： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CWE 分类： CWE-180
漏洞状态： Analyzed
发布时间： 2026-07-10T22:16:42.697
最后更新： 2026-07-14T20:00:08.103

漏洞描述

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Prior to 3.0.16, the multipart/form-data request body parser in libmodsecurity silently removes embedded line breaks from non-file form-field values before exporting them to ARGS and ARGS_POST because src/request_body_processor/multipart.cc overwrites reserved bytes in m_reserve instead of appending the current buffer. This creates a parser differential between ModSecurity and backend applications that preserve line breaks in form fields, allowing rules that inspect ARGS or ARGS_POST to miss payloads whose dangerous syntax depends on a line break. This issue is fixed in version 3.0.16.

影响分析

此漏洞的具体影响取决于实际利用场景。"

修复建议

及时关注厂商发布的安全更新和补丁
升级受影响组件到最新版本
如无法立即升级，参考厂商提供的临时缓解措施
加强网络访问控制和监控

参考链接

💬 评论