CVE-2009-5031: XSS
ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks via a single quote in a request parameter in the Content-Disposition field of a request with a multipart/form-data Content-Type header.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-5031?
CVE-2009-5031 has a moderate severity rating due to its potential to allow bypassing of security filters and executing attacks.
How do I fix CVE-2009-5031?
To fix CVE-2009-5031, upgrade ModSecurity to version 2.5.11 or later immediately.
What are the risks associated with CVE-2009-5031?
The risks associated with CVE-2009-5031 include exposure to cross-site scripting (XSS) attacks and other security rule bypasses.
Which systems are affected by CVE-2009-5031?
CVE-2009-5031 affects versions of ModSecurity prior to 2.5.11 and specifically impacts openSUSE 11.4, 12.2, and 12.3.
Can I still use ModSecurity if I have CVE-2009-5031?
Using ModSecurity with CVE-2009-5031 is not recommended, and it is crucial to update to a secure version to maintain protection.