CVE-2023-38285: High severity modsecurity vulnerability
Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-38285?
CVE-2023-38285 is a vulnerability in Trustwave ModSecurity 3.x before 3.0.10 that has inefficient algorithmic complexity.
What is the severity of CVE-2023-38285?
The severity of CVE-2023-38285 is high with a severity value of 7.5.
What software is affected by CVE-2023-38285?
Trustwave ModSecurity 3.x versions between 3.0.0 and 3.0.10 are affected by CVE-2023-38285.
How do I fix CVE-2023-38285?
To fix CVE-2023-38285, update Trustwave ModSecurity to version 3.0.10 or later.
Where can I find more information about CVE-2023-38285?
You can find more information about CVE-2023-38285 [here](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/modsecurity-v3-dos-vulnerability-in-four-transformations-cve-2023-38285/) and [here](https://www.trustwave.com/en-us/resources/security-resources/software-updates/end-of-sale-and-trustwave-support-for-modsecurity-web-application-firewall/).