CVE-2012-4528: fedoraproject fedora
Vulnerability summary
CVE-2012-4528 is a medium (CVSS 5.0) vulnerability in fedoraproject fedora. EPSS estimates a 12.51% chance of exploitation in the next 30 days, higher than 96.1% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 28-12-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an invalid part precedes the crafted data.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
12.51%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 12.51% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (seclists.org)
Maturity: unknown
ModSecurity - 'POST' Security Bypass
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- modsecurity-apache< 2.6.6-5
Fedoraproject1 product
- fedoraEOL18
Opensuse1 product
- opensuseEOL11.4 | 12.2 | 12.3
Trustwave1 product
- modsecurity< 2.7.0
Ubuntu1 product
- modsecurity-apache< 2.7.7-2
5 vendors · 5 products
References
14 links- lists.opensuse.org/opensuse-updates/2013-08/msg00031.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- mod-security.svn.sourceforge.net/viewvc/mod-security?view=revision&sortby=date&revision=2081X Refsource CONFIRMBroken LinkREPORT
- lists.opensuse.org/opensuse-updates/2013-08/msg00020.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- mod-security.svn.sourceforge.net/viewvc/mod-security/m2/branches/2.7.x/CHANGESX Refsource CONFIRMBroken Link
- lists.fedoraproject.org/pipermail/package-announce/2012-November/093011.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- lists.opensuse.org/opensuse-updates/2013-08/msg00025.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
