owasp-modsecurity / owasp-modsecurity/ModSecurity

About CVE-2024-46292

Open
#3,274 0 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

3.x
Dominant language
C++
Stars
9.8k
Forks
1.8k
Avg merge
2h 46m
Merged PRs (30d)
1

Description

A CVE was published on October 9 2024:

CVE-2024-46292

We wrote a blog post where we try to summarize what happened:

https://modsecurity.org/20241011/about-cve-2024-46292-2024-october/

If you have any question or want to discuss anything you can ask here.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Read the linked CVE-2024-46292 entry and the ModSecurity blog post from October 2024 first. The issue contains no requested code or documentation change; it currently serves only as an open place for questions or discussion.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
security
Issue type
Documentation
Difficulty
1/5
Estimated time
Under an hour
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.