CVE-2012-4528
NoneCVSS
—
EPSS
12.5%
Published
Dec 28, 2012
CISA due date
—
The record
The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an invalid part precedes the crafted data.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | modsecurity-apache | 0 | 2.6.6-5 |
| Debian:12 | modsecurity-apache | 0 | 2.6.6-5 |
| Debian:13 | modsecurity-apache | 0 | 2.6.6-5 |
| Ubuntu:14.04:LTS | modsecurity-apache | 0 | 2.7.7-2 |
| openSUSE:Tumbleweed | apache2-mod_security2 | 0 | 2.9.0-5.6 |