Approved changes feed: RSS · Atom

cpe:2.3:a:owasp:modsecurity:3.0.0:*:*:*:*:*:*:*

part: a version: 3.0.0 update: *

VendorOwasp (b778b703-6f88-5eeb-b966-330b456a6d00)
ProductModsecurity (6b8e69d5-49cf-516f-a8a8-ffb722867d8b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/modsecurity purl2cpe 2026-06-01 10:12:06.995854
pkg:deb/ubuntu/modsecurity purl2cpe 2026-06-01 10:12:06.995855
pkg:docker/owasp/modsecurity purl2cpe 2026-06-01 10:12:06.995856
pkg:github/owasp-modsecurity/modsecurity purl2cpe 2026-06-01 10:12:06.995858
pkg:rpm/opensuse/modsecurity purl2cpe 2026-06-01 10:12:06.995859
pkg:sourceforge/modsecurity.mirror purl2cpe 2026-06-01 10:12:06.995861

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-13065 vulnerable 2026-06-03 14:38:10.193128 Details available
ModSecurity 3.0.0 has XSS via an onerror attribute of an IMG element. NOTE: a third party has disputed this issue because it may only apply to environments without a Core Rule Set configured
Published: 2018-07-03T11:00:00.000Z
Updated: 2024-08-05T08:52:49.413Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.