CVE-2023-50969

EUVD-2023-55697
Thales Imperva SecureSphere WAF 14.7.0.40 allows remote attackers to bypass WAF rules via a crafted POST request, a different vulnerability than CVE-2021-45468.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
CISA-ADPADP
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
impervasecuresphere_web_application_firewall
14.7.0.40
ADP
References
https://docs.imperva.com/bundle/v14.7-waf-administration-guide/page/9282.htm
https://www.hoyahaxa.com/2024/03/imperva-waf-bypass-cve-2023-50969.html
https://docs.imperva.com/bundle/v14.7-waf-administration-guide/page/9282.htm
https://www.hoyahaxa.com/2024/03/imperva-waf-bypass-cve-2023-50969.html