writeups.xyz / ModSecurity: Path Confusion and really easy bypass on v2 and v3

Submitter : c2a

Date: 2 February 2024

Bounty : undisclosed

Vulnerabilities :

• WAF Bypass
• Path Confusion

Programs :

• ModSecurity

Authors :

• Andrea Menin (@AndreaTheMiddle)

Link :
https://blog.sicuranext.com/modsecurity-path-confusion-bugs-bypass/