upgrade owasp modsec 3.3.2
Hi devs !
Actual plesk owasp modsec version is 3.2 from 2019.
Could you update to the last version ? ( 3.3.2 )
Thanks in advance
1
vote
dufresne
shared this idea
It is already there:
Plesk 18.0.40
[root@ppu18-0 ~]# rpm -qa plesk-modsecurity-crs
plesk-modsecurity-crs-3.3.2-2.centos.7+p18.0.38.0+t210825.1032.×86_64
Please use the latest version of Plesk.
—
IG
-
dufresne
commented
PS : OWASP modsec 3.05 and 3.2 has a severe security breach ( cvss score 8 ).
It has been patched in 3.2.1 or 3.3.2.https://coreruleset.org/20210630/cve-2021-35368-crs-request-body-bypass/
Thanks