Skip to content

Commit ba72c77

Browse files
authored
Update 2024-08-29-crs-versions-4-6-0-and-3-3-6-have-been-released.md
1 parent a8ba2df commit ba72c77

File tree

1 file changed

+1
-3
lines changed

1 file changed

+1
-3
lines changed

content/blog/2024-08-29-crs-versions-4-6-0-and-3-3-6-have-been-released.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: amonachesi
55
categories:
66
- Blog
77
---
8-
We have recently released version [4.6.0](https://github.com/coreruleset/coreruleset/releases/tag/v4.6.0) for CRS 4, fixing a serious problem. As this problem affects CRS 3 as well, we also did a backport release for v3. ([3.3.6](https://github.com/coreruleset/coreruleset/releases/tag/v3.3.6)).
8+
We have recently released version [4.6.0](https://github.com/coreruleset/coreruleset/releases/tag/v4.6.0) for CRS 4, fixing a serious problem. As this problem affects CRS 3 as well, we also did a backport release for v3. ([3.3.6](https://github.com/coreruleset/coreruleset/releases/tag/v3.3.6)). All users are requested to update to the new releases.
99

1010
The new releases tackle two multipart file upload bypass methods that were reported by [@luelueking](https://github.com/luelueking):
1111

@@ -26,5 +26,3 @@ Release 4.6.0 contains other features and fixes like
2626
- the removal of unnecessary chain rule and capture in rule 921180 by [@EsadCetiner](https://github.com/EsadCetiner) ([#3787](https://github.com/coreruleset/coreruleset/pull/3787))
2727
- a fix for rule 942160 by checking against REQUEST_FILENAME by [@mat1010](https://github.com/mat1010) ([#3782](https://github.com/coreruleset/coreruleset/pull/3782))
2828
- an update of rule 932270's version variable by [@airween](https://github.com/airween) ([#3786](https://github.com/coreruleset/coreruleset/pull/3786))
29-
30-
All users are requested to update to the new releases.

0 commit comments

Comments
 (0)