Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-48279

24
FAUCET Score

CVE-2022-48279 describes a vulnerability in ModSecurity versions prior to 2.9.6 and 3.0.8, where improper parsing of HTTP multipart requests allowed attackers to bypass the Web Application Firewall. This high-severity vulnerability (CVSS 7.5) is network-exploitable with low attack complexity, potentially leading to high confidentiality impact. While related to CVE-2022-39956, it represents independent code changes; there is currently no known active exploitation, public exploit code, or significant community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
>= 3.0.0, < 3.0.8CPE matchmatch criteria
cpe:2.3:a:owasp:modsecurity:*:*:*:*:*:*:*:*
< 2.9.6CPE matchmatch criteria
cpe:2.3:a:trustwave:modsecurity:*:*:*:*:*:*:*:*
10.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.17%
Probability of exploitation in next 30 days
EPSS Percentile
64.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0117 is in the 43rd percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (7)

github_advisorypatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services for RHEL 8Fixed in: jbcs-httpd24-mod_security-0:2.9.3-29.el8jbcs
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_security-0:2.9.3-29.el7jbcs
View patch
redhatpatch availablevia redhat_api
Product: Text-Only JBCSFixed in: mod_security
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: mod_security
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: mod_security
redhatend of lifevia redhat_api
Product: Red Hat Software CollectionsFixed in: httpd24-mod_security

Vendor Advisories (1)

redhatCVE-2022-48279Moderate

mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass

Jan 20, 2023

References

coreruleset.org / 20220919/crs-version-3-3-3-and-3-2-2-covering-several-cves
Not Applicable
github.com / SpiderLabs/ModSecurity/pull/2795
PatchThird Party Advisory
github.com / SpiderLabs/ModSecurity/pull/2797
PatchThird Party Advisory
github.com / SpiderLabs/ModSecurity/releases/tag/v2.9.6
Release NotesThird Party Advisory
github.com / SpiderLabs/ModSecurity/releases/tag/v3.0.8
Release NotesThird Party Advisory
lists.debian.org / debian-lts-announce/2023/01/msg00023.html
Mailing ListThird Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/52TGCZCOHYBDCVWJYNN2PS4QLOHCXWTQ
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/SYRTXTOQQI6SB2TLI5QXU76DURSLS4XI
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/WCH6JM4I4MD4YABYFHSBDDOUFDGIFJKL