[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGMkJvXNFzn2OXg-4OQdl5c2TngaGpmmX6qFfykduKso":3,"g5a-risk:CVE-2021-35368":166},{"success":4,"data":5,"meta":164},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":60,"references":61,"referencesCount":97,"weaknesses":98,"weaknessesCount":102,"isActivelyExploited":103,"cisaInfo":26,"otxData":26,"relatedBlogPosts":104,"seoMetadata":105,"configurations":130,"relatedVendorCves":162,"notableEvents":163},"CVE-2021-35368","What is CVE-2021-35368?","OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by a Request Body Bypass via a trailing pathname.","2021-11-05T18:15:09.317","2023-11-07T03:36:31.43",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":24,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[30],{"Source":16,"Type":17,"CVSSData":31,"BaseSeverity":24,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":20,"AccessComplexity":21,"Authentication":22,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.02733,[38,38,38,38,38,38,38],"Critical",[42,47,52,55],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"owasp","owasp_modsecurity_core_rule_set","*","cpe:2.3:a:owasp:owasp_modsecurity_core_rule_set:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"fedoraproject","fedora","36","cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"37","cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",4,[62,69,75,79,82,86,90,93],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fcoreruleset.org\u002F20210630\u002Fcve-2021-35368-crs-request-body-bypass\u002F","Coreruleset",[66,67,68],"Exploit","Release Notes","Vendor Advisory",{"url":70,"source":71,"tags":72},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F01\u002Fmsg00033.html","Debian",[73,74],"Mailing List","Third Party Advisory",{"url":76,"source":77,"tags":78},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F6MS5GMNYHFFIBWLJW7N3XAD24SLF3PFZ\u002F","Fedoraproject",[],{"url":80,"source":77,"tags":81},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FIVYUJOKHDEXFTM2CZMEESJ6TZSPVNSSZ\u002F",[],{"url":83,"source":84,"tags":85},"https:\u002F\u002Fowasp.org\u002Fwww-project-modsecurity-core-rule-set\u002F","Owasp",[68],{"url":87,"source":88,"tags":89},"https:\u002F\u002Fportswigger.net\u002Fdaily-swig\u002Flessons-learned-how-a-severe-vulnerability-in-the-owasp-modsecurity-core-rule-set-sparked-much-needed-change","Portswigger",[66,74],{"url":91,"source":88,"tags":92},"https:\u002F\u002Fportswigger.net\u002Fdaily-swig\u002Fwaf-bypass-severe-owasp-modsecurity-core-rule-set-bug-was-present-for-several-years",[66,74],{"url":94,"source":95,"tags":96},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202305-25","Gentoo",[],8,[99],{"id":100,"name":100,"description":101},"Unknown","NVD-CWE-Other",1,false,[],{"title":106,"metaDescription":107,"keywords":108,"canonicalUrl":109,"structuredData":110},"What is CVE-2021-35368? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-35368, a critical severity cyber security vulnerability from 2021. OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2...","CVE-2021-35368, CVE-2021-35368 vulnerability, CVE-2021-35368 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, owasp security, fedoraproject security, debian security, owasp_modsecurity_core_rule_set vulnerability, fedora vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2021-35368",{"@context":111,"@type":112,"headline":106,"description":107,"datePublished":9,"dateModified":10,"author":113,"publisher":117,"about":121,"mainEntityOfPage":125,"articleSection":128,"keywords":129},"https:\u002F\u002Fschema.org","TechArticle",{"@type":114,"name":115,"url":116},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":114,"name":115,"url":116,"logo":118},{"@type":119,"url":120},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":122,"name":6,"description":123,"additionalType":124},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":126,"@id":127},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-35368","Cybersecurity","CVE-2021-35368, CVE-2021-35368 vulnerability, CVE-2021-35368 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[131,148,156],{"Operator":26,"Negate":26,"Nodes":132},[133],{"Operator":134,"Negate":26,"CPEMatch":135},"OR",[136,140,144],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":137,"VersionStartExcluding":26,"VersionStartIncluding":138,"VersionEndExcluding":139,"VersionEndIncluding":26},"BA052074-9C07-4185-A05A-0886F5B0F3ED","3.1.0","3.1.2",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":141,"VersionStartExcluding":26,"VersionStartIncluding":142,"VersionEndExcluding":143,"VersionEndIncluding":26},"236DD7ED-49E1-4AA6-A99E-7B5416B9EB13","3.2.0","3.2.1",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":145,"VersionStartExcluding":26,"VersionStartIncluding":146,"VersionEndExcluding":147,"VersionEndIncluding":26},"19EA47DF-6614-4286-AC02-47935007F72C","3.3.0","3.3.2",{"Operator":26,"Negate":26,"Nodes":149},[150],{"Operator":134,"Negate":26,"CPEMatch":151},[152,154],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":153,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E30D0E6F-4AE8-4284-8716-991DFA48CC5D",{"Operator":26,"Negate":26,"Nodes":157},[158],{"Operator":134,"Negate":26,"CPEMatch":159},[160],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":161,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",[],[],{"lastModified":10,"cacheTime":165,"version":32},1792265786249,{"score":167,"band":168,"action":169,"scoredAt":170},54,"Medium","Plan remediation","2026-10-16T06:52:26.509343+00:00"]