CVE:CVE-2022-39957
CNNVD:CNNVD-202209-1553
OWASP ModSecurity Core Rule Set（CRS）是一组用于ModSecurity或兼容的Web应用程序防火墙的通用攻击检测规则。
OWASP ModSecurity Core Rule Set (CRS)存在安全漏洞，该漏洞源于字符集接受头字段，导致响应规则集绕过。
solution:Upgrade owasp owasp_modsecurity_core_rule_set to a higher version than 3.2.2,3.3.3,and avoid the version [3.0.0,3.2.2),[3.3.0,3.3.3); Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0