High severity7.5NVD Advisory· Published Jul 26, 2023· Updated Jun 17, 2026
CVE-2023-38285
CVE-2023-38285
Description
Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15cpe:2.3:a:owasp:modsecurity:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:owasp:modsecurity:*:*:*:*:*:*:*:*range: >=3.0.0,<3.0.10
- (no CPE)
- (no CPE)range: <3.0.10
- osv-coords12 versionspkg:apk/chainguard/modsecuritypkg:apk/chainguard/modsecurity-configpkg:apk/chainguard/modsecurity-staticpkg:apk/wolfi/modsecuritypkg:apk/wolfi/modsecurity-configpkg:apk/wolfi/modsecurity-staticpkg:bitnami/modsecuritypkg:bitnami/modsecurity2pkg:rpm/opensuse/modsecurity&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/modsecurity&distro=openSUSE%20Leap%2015.5pkg:rpm/suse/modsecurity&distro=SUSE%20Package%20Hub%2015%20SP4pkg:rpm/suse/modsecurity&distro=SUSE%20Package%20Hub%2015%20SP5
< 3.0.10-r0+ 11 more
- (no CPE)range: < 3.0.10-r0
- (no CPE)range: < 3.0.10-r0
- (no CPE)range: < 3.0.10-r0
- (no CPE)range: < 3.0.10-r0
- (no CPE)range: < 3.0.10-r0
- (no CPE)range: < 3.0.10-r0
- (no CPE)range: >= 3.0.0, < 3.0.10
- (no CPE)range: >= 3.0.0, < 3.0.10
- (no CPE)range: < 3.0.10-bp154.2.3.1
- (no CPE)range: < 3.0.10-bp155.3.3.1
- (no CPE)range: < 3.0.10-bp154.2.3.1
- (no CPE)range: < 3.0.10-bp155.3.3.1
Patches
Vulnerability mechanics
References
2- www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/modsecurity-v3-dos-vulnerability-in-four-transformations-cve-2023-38285/nvdVendor Advisory
- www.trustwave.com/en-us/resources/security-resources/software-updates/end-of-sale-and-trustwave-support-for-modsecurity-web-application-firewall/nvdProduct
News mentions
0No linked articles in our index yet.