漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
coreruleset (aka OWASP ModSecurity Core Rule Set) through 3.3.4 does not detect multiple Content-Type request headers on some platforms. This might allow attackers to bypass a WAF with a crafted payload, aka "Content-Type confusion" between the WAF and the backend application. This occurs when the web application relies on only the last Content-Type header. Other platforms may reject the additional Content-Type header or merge conflicting headers, leading to detection as a malformed header.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OWASP ModSecurity Core Rule Set 安全漏洞
Vulnerability Description
OWASP ModSecurity Core Rule Set（CRS）是一组用于ModSecurity或兼容的Web应用程序防火墙的通用攻击检测规则。 OWASP ModSecurity Core Rule Set 3.3.4及之前版本存在安全漏洞，该漏洞源于不会阻止多个 Content-Type 标头，这可能允许攻击者使用精心设计的有效负载绕过 WAF。
CVSS Information
N/A
Vulnerability Type
N/A