Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ModSecurity has possible DoS vulnerability in sanitiseArg action
Vulnerability Description
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
循环内过多的平台资源消耗
Vulnerability Title
ModSecurity 安全漏洞
Vulnerability Description
ModSecurity是OWASP ModSecurity开源的一个开源、跨平台的web应用程序防火墙（WAF）引擎。 ModSecurity 2.9.10之前版本存在安全漏洞，该漏洞源于sanitiseArg操作可能添加过多参数，可能导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A