CVE-2009-5031 Security feature bypass in n/a
Remote attackers can bypass ModSecurity filtering rules and trigger XSS by using single quotes in multipart form data parameters.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-5031?
CVE-2009-5031 is a medium-severity vulnerability in Opensuse Opensuse, published on 22 Jul 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks via a single quote in a request parameter in the Content-Disposition field of a request with a multipart/form-data Content-Type header.
Weakness: CWE-79
Which versions are affected by CVE-2009-5031?
It affects 2 products.
Products include Opensuse Opensuse, Trustwave Modsecurity.
How do I fix CVE-2009-5031?
Upgrade to a fixed version.
Is CVE-2009-5031 being exploited?
There is no known exploitation of CVE-2009-5031 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Opensuse
Sources
Also known as GHSA-rcvp-p5h6-67hw.