CVE-2023-38285

Published: Jul 26, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity.

Affected (1)

Products: Owasp: Modsecurity

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Owasp Modsecurity	From 3.0.0 to 3.0.10

Related CWEs

Inefficient Algorithmic Complexity

An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

References (4)

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/modsecurity-v3-dos-vulnerability-in-four-transformations-cve-2023-38285/

Source: cve@mitre.org

Vendor Advisory

https://www.trustwave.com/en-us/resources/security-resources/software-updates/end-of-sale-and-trustwave-support-for-modsecurity-web-application-firewall/

Source: cve@mitre.org

Product

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/modsecurity-v3-dos-vulnerability-in-four-transformations-cve-2023-38285/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.trustwave.com/en-us/resources/security-resources/software-updates/end-of-sale-and-trustwave-support-for-modsecurity-web-application-firewall/

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.