CVE-2025-54571 - CVE House
Back to Database
Status published Medium CVE-2025-54571

ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure

Vulnerability Description

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type, which could lead to several issues depending on the HTTP scenario. For example, we have demonstrated the potential for XSS and arbitrary script source code disclosure in the latest version of mod_security2. This issue is fixed in version 2.9.12.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54571

Credits & Attribution

No credits recorded in the NVD database.

References

More from owasp-modsecurity

View All →
CVE-2025-52891
ModSecurity empty XML tag causes segmentation fault
Medium 6.5
CVE-2025-48866
ModSecurity has possible DoS vulnerability in sanitiseArg action
High 7.5
CVE-2025-47947
ModSecurity Has Possible DoS Vulnerability
High 7.5
CVE-2025-27110
Libmodsecurity3 has possible bypass of encoded HTML entities
High 7.9

Affected Vendor

owasp-modsecurity

View all reports →

Affected Software

ModSecurity
Vulnerable Versions:
< 2.9.12

Timeline

Official Publish: August 5th, 2025
Last Modified: November 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-252

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.