ModSecurity Flaws Let Attackers Bypass WAF Protection and Potentially Execute Code

ModSecurity has disclosed multiple security flaws that could let attackers bypass request-inspection rules, evade file-upload protections, cause denial-of-service conditions , and potentially execute code in vulnerable deployments. The advisories, published September 30, include high-severity issues affecting multipart request parsing and the ModSecurity v3 XML request-body processor. Organizations using ModSecurity alongside the OWASP Core Rule Set should urgently review…