Vulnerability in Owasp-modsecurity Modsecurity

CVE-2025-27110

Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. A bug that exists only in Libmodsec…

EPSS: 0.003 (51.0th percentile) — read the EPSS interpretation.

Affected products

Owasp-modsecurity Modsecurity — versions = 3.0.13

Weakness classification (CWE)

CWE-172

References

https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-42w7-rmv5-4x2j (x_refsource_CONFIRM)
https://github.com/owasp-modsecurity/ModSecurity/issues/3340 (x_refsource_MISC)