AppSec Bot detection broken by Content-Security-Policy set on front web server
Author: brknkfrCreated Sep 1, 2026Updated Sep 2, 2026
Labelskind/bugneeds/triageos/linux
What happened?
After enabling the bot detection as described in https://docs.crowdsec.net/docs/next/appsec/bot_detection/enable, the bot detection won't load because there is a strict content security policy set on the front web server (nginx) which does all the SSL termination and which apparently sends configured Content-Security-Policy before Crowdsec.
I see that the bot detection itself is sending its own CSP.
Workaround:
- Set a local virtual host for the website listening on a socket
- Do ssl termination on a virtual host (for Crowdsec) and pass it on with proxy_pass to the local socket.
This way, CrowdSec sits in between the requester and the actual backend.
Possible fix:
- Make the Style- and Script-Nonce of the Crowdsec-Bot-Detection page configurable
What did you expect to happen?
The website should load.
How can we reproduce it (as minimally and precisely as possible)?
- Set CSP on virtual host on a front web server.
- Enable Crowdsec, AppSec with Bot detection
- Try to load the website.
Anything else we need to know?
No response
Crowdsec version
version: v1.8.0-debian-pragmatic-amd64-cc76dbbc
Codename: alphaga
BuildDate: 2026-08-31_13:36:10
GoVersion: 1.26.3
Platform: linux
libre2: C++
User-Agent: crowdsec/v1.8.0-debian-pragmatic-amd64-cc76dbbc-linux
Constraint_parser: >= 1.0, <= 3.0
Constraint_scenario: >= 1.0, <= 3.0
Constraint_api: v1
Constraint_acquis: >= 1.0, < 2.0
Built-in optional components: cscli_setup, datasource_appsec, datasource_cloudwatch, datasource_docker, datasource_file, datasource_http, datasource_journalctl, datasource_k8s-audit, datasource_kafka, datasource_kinesis, datasource_kubernetes, datasource_loki, datasource_s3, datasource_syslog, datasource_victorialogs, datasource_wineventlog, db_mysql, db_postgres, db_sqlite
OS version
PRETTY_NAME="Debian GNU/Linux 13 (trixie)"
NAME="Debian GNU/Linux"
VERSION_ID="13"
VERSION="13 (trixie)"
VERSION_CODENAME=trixie
DEBIAN_VERSION_FULL=13.6
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"Linux crowdsec 7.1.8+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 7.1.8-1~bpo13+1 (2026-08-16) x86_64 GNU/LinuxEnabled collections and parsers
name,status,version,description,type
crowdsecurity/appsec-bot-detection-logs,enabled,0.3,Parse AppSec bot-detection / challenge events,parsers
crowdsecurity/appsec-logs,enabled,0.6,Parse Appsec events,parsers
crowdsecurity/dateparse-enrich,enabled,0.2,,parsers
crowdsecurity/geoip-enrich,enabled,0.5,"Populate event with geoloc info : as, country, coords, source range.",parsers
crowdsecurity/public-dns-allowlist,enabled,0.1,Allow events from public DNS servers,parsers
crowdsecurity/sshd-logs,enabled,3.1,Parse openSSH logs,parsers
crowdsecurity/sshd-success-logs,enabled,0.1,Parse successful ssh logins,parsers
crowdsecurity/syslog-logs,enabled,1.0,,parsers
crowdsecurity/whitelists,enabled,0.3,Whitelist events from private ipv4 addresses,parsers
crowdsecurity/cdn-whitelist,enabled,0.5,Whitelist CDN providers,postoverflows
crowdsecurity/google-special-crawlers-whitelist,enabled,0.1,"Whitelist events from Google special crawlers (e.g. Google-InspectionTool, GoogleOther)",postoverflows
crowdsecurity/rdns,enabled,0.4,Lookup the DNS associated to the source IP only for overflows,postoverflows
crowdsecurity/seo-bots-whitelist,enabled,0.5,Whitelist good search engine crawlers,postoverflows
crowdsecurity/appsec-bot-challenge-too-many-requests,enabled,0.2,Client made too many request to challenge page,scenarios
crowdsecurity/appsec-bot-challenge-too-many-submissions,enabled,0.2,Client made too many submissions for challenge,scenarios
crowdsecurity/appsec-generic-test,enabled,0.2,Crowdsec Generic Test Scenario for AppSec: generate an alert for appsec out of band rule for testing,scenarios
crowdsecurity/appsec-native,enabled,0.3,Identify attacks flagged by CrowdSec AppSec via native rules,scenarios
crowdsecurity/appsec-vpatch,enabled,0.7,Identify attacks flagged by CrowdSec AppSec,scenarios
crowdsecurity/crowdsec-appsec-outofband,enabled,0.7,IP has made more than 5 requests that triggered out-of-band appsec rules,scenarios
crowdsecurity/http-bf-wordpress_bf,enabled,0.7,Detect WordPress bruteforce on admin interface,scenarios
crowdsecurity/http-wordpress-scan,enabled,0.4,Detect exploitation attempts against common WordPress endpoints,scenarios
crowdsecurity/http-wordpress_user-enum,enabled,0.3,Detect WordPress probing: authors enumeration,scenarios
crowdsecurity/http-wordpress_wpconfig,enabled,0.3,Detect WordPress probing: variations around wp-config.php by wpscan,scenarios
crowdsecurity/ssh-bf,enabled,0.3,Detect ssh bruteforce,scenarios
crowdsecurity/ssh-cve-2024-6387,enabled,0.2,Detect exploitation attempt of CVE-2024-6387,scenarios
crowdsecurity/ssh-generic-test,enabled,0.2,Crowdsec Generic Test Scenario: SSH brute force trigger,scenarios
crowdsecurity/ssh-refused-conn,enabled,0.1,Detect sshd refused connections,scenarios
crowdsecurity/ssh-slow-bf,enabled,0.4,Detect slow ssh bruteforce,scenarios
crowdsecurity/ssh-time-based-bf,enabled,0.3,Detect time-based ssh bruteforce attempts that evade rate limiting (with false positive reduction),scenarios
crowdsecurity/appsec-bot-detection,enabled,0.3,,contexts
crowdsecurity/appsec_base,enabled,1.1,,contexts
crowdsecurity/bf_base,enabled,0.1,,contexts
crowdsecurity/appsec-bot-challenge-exclude-ai-crawlers,enabled,0.1,,appsec-configs
crowdsecurity/appsec-bot-challenge-exclude-api,enabled,0.2,,appsec-configs
crowdsecurity/appsec-bot-challenge-exclude-crawler-files,enabled,0.4,,appsec-configs
crowdsecurity/appsec-bot-challenge-exclude-feeds,enabled,0.4,,appsec-configs
crowdsecurity/appsec-bot-challenge-exclude-monitoring,enabled,0.1,,appsec-configs
crowdsecurity/appsec-bot-challenge-exclude-search-engines,enabled,0.1,,appsec-configs
crowdsecurity/appsec-bot-challenge-exclude-social,enabled,0.1,,appsec-configs
crowdsecurity/appsec-bot-challenge-exclude-static,enabled,0.3,,appsec-configs
crowdsecurity/appsec-bot-challenge-exclude-webhooks,enabled,0.4,,appsec-configs
crowdsecurity/appsec-bot-challenge-scoring,enabled,0.2,,appsec-configs
crowdsecurity/appsec-bot-challenge-scoring-balanced,enabled,0.2,,appsec-configs
crowdsecurity/appsec-default,"enabled,tainted",?,,appsec-configs
crowdsecurity/crs,enabled,0.3,,appsec-configs
crowdsecurity/generic-rules,enabled,0.4,,appsec-configs
crowdsecurity/virtual-patching,enabled,0.4,,appsec-configs
local/body-limit,"enabled,local",,,appsec-configs
local/crs-alerting,"enabled,local",,,appsec-configs
crowdsecurity/appsec-generic-test,enabled,0.3,AppSec Generic Test: trigger on GET /crowdsec-test-NtktlJHV4TfBSK3wvlhiOBnl`,appsec-rules
crowdsecurity/base-config,enabled,0.1,,appsec-rules
crowdsecurity/crs,enabled,0.6,,appsec-rules
crowdsecurity/crs-exclusion-plugin-nextcloud,enabled,0.1,,appsec-rules
crowdsecurity/crs-exclusion-plugin-wordpress,enabled,0.1,,appsec-rules
crowdsecurity/experimental-no-user-agent,enabled,0.2,Protect against no user agent,appsec-rules
crowdsecurity/generic-freemarker-ssti,enabled,0.4,Generic FreeMarker SSTI,appsec-rules
crowdsecurity/generic-wordpress-uploads-listing,enabled,0.4,Protect Wordpress uploads directory from listing files,appsec-rules
crowdsecurity/generic-wordpress-uploads-php,enabled,0.2,Detect php execution in wordpress uploads directory,appsec-rules
crowdsecurity/vpatch-connectwise-auth-bypass,enabled,0.4,Detect exploitation of auth bypass in ConnectWise ScreenConnect,appsec-rules
crowdsecurity/vpatch-CVE-2002-1131,enabled,0.1,"Detects XSS attempts in SquirrelMail 1.2.6/1.2.7 via unsanitized input in addressbook, options, search, and help modules.",appsec-rules
crowdsecurity/vpatch-CVE-2007-0885,enabled,0.1,Detects XSS vulnerability in Jira Rainbow.Zen via the id parameter in BrowseProject.jspa.,appsec-rules
crowdsecurity/vpatch-CVE-2014-5181,enabled,0.2,Detects path traversal in Last.fm Rotation plugin via snode parameter in lastfm-proxy.php,appsec-rules
crowdsecurity/vpatch-CVE-2017-9841,enabled,0.4,PHPUnit RCE (CVE-2017-9841),appsec-rules
crowdsecurity/vpatch-CVE-2018-1000861,enabled,0.1,Jenkins - RCE (CVE-2018-1000861),appsec-rules
crowdsecurity/vpatch-CVE-2018-10562,enabled,0.3,Dasan GPON RCE (CVE-2018-10562),appsec-rules
crowdsecurity/vpatch-CVE-2018-11511,enabled,0.2,Detects SQL injection attempts in ASUSTOR ADM via album_id parameter in /photo-gallery/api/album/tree_lists/.,appsec-rules
crowdsecurity/vpatch-CVE-2018-1207,enabled,0.1,Detects remote code injection in Dell iDRAC7/8 devices via LD_DEBUG CGI variable.,appsec-rules
crowdsecurity/vpatch-CVE-2018-13317,enabled,0.1,Detects unauthenticated access to TOTOLINK A3002RU password disclosure endpoint.,appsec-rules
crowdsecurity/vpatch-CVE-2018-13379,enabled,0.2,Fortinet FortiOS - Credentials Disclosure (CVE-2018-13379),appsec-rules
crowdsecurity/vpatch-CVE-2018-20062,enabled,0.1,ThinkPHP - RCE (CVE-2018-20062),appsec-rules
crowdsecurity/vpatch-CVE-2019-1003030,enabled,0.1,Jenkins - RCE (CVE-2019-1003030),appsec-rules
crowdsecurity/vpatch-CVE-2019-12989,enabled,0.4,Citrix SQLi (CVE-2019-12989),appsec-rules
crowdsecurity/vpatch-CVE-2019-18935,enabled,0.1,Telerik - RCE (CVE-2019-18935),appsec-rules
crowdsecurity/vpatch-CVE-2019-18952,enabled,0.1,Detects arbitrary file upload attempts to Xfilesharing up.cgi endpoint (CVE-2019-18952),appsec-rules
crowdsecurity/vpatch-CVE-2019-5418,enabled,0.2,Detects Rails file content disclosure via crafted Accept header (CVE-2019-5418),appsec-rules
crowdsecurity/vpatch-CVE-2019-7276,enabled,0.1,Detects unauthenticated remote code execution in Optergy Proton/Enterprise via backdoor console endpoint.,appsec-rules
crowdsecurity/vpatch-CVE-2019-9762,enabled,0.2,Detects SQL injection in PHPSHE 1.7 via the id parameter in pay.php,appsec-rules
crowdsecurity/vpatch-CVE-2020-10987,enabled,0.1,Detects command injection in Tenda AC15 AC1900 via deviceName parameter in setUsbUnload endpoint.,appsec-rules
crowdsecurity/vpatch-CVE-2020-11738,enabled,0.7,Wordpress Snap Creek Duplicator - Path Traversal (CVE-2020-11738),appsec-rules
crowdsecurity/vpatch-CVE-2020-13640,enabled,0.2,Detects SQL injection in wpDiscuz plugin via the order parameter in wpdLoadMoreComments action.,appsec-rules
crowdsecurity/vpatch-CVE-2020-17496,enabled,0.2,vBulletin RCE (CVE-2020-17496),appsec-rules
crowdsecurity/vpatch-CVE-2020-25078,enabled,0.1,Detects unauthorized access to D-Link camera administrator password disclosure endpoint.,appsec-rules
crowdsecurity/vpatch-CVE-2020-37123,enabled,0.1,Detects remote code execution via unsanitized ping parameter in Pinger 1.0,appsec-rules
crowdsecurity/vpatch-CVE-2020-5902,enabled,0.1,F5 BIG-IP TMUI - RCE (CVE-2020-5902),appsec-rules
crowdsecurity/vpatch-CVE-2020-8656,enabled,0.2,Detects SQL injection in EyesOfNetwork getApiKey endpoint via username parameter.,appsec-rules
crowdsecurity/vpatch-CVE-2020-9054,enabled,0.1,Detects pre-authentication command injection in Zyxel NAS devices via weblogin.cgi,appsec-rules
crowdsecurity/vpatch-CVE-2021-22941,enabled,0.4,Citrix RCE (CVE-2021-22941),appsec-rules
crowdsecurity/vpatch-CVE-2021-25281,enabled,0.2,Detects SaltStack Salt API authentication bypass via wheel_async client in /run endpoint.,appsec-rules
crowdsecurity/vpatch-CVE-2021-26072,enabled,0.1,Detects SSRF in Atlassian Confluence via WidgetConnector plugin (CVE-2021-26072),appsec-rules
crowdsecurity/vpatch-CVE-2021-26086,enabled,0.2,Atlassian Jira Server/Data Center 8.4.0 - Limited Remote File Read/Include (CVE-2021-26086),appsec-rules
crowdsecurity/vpatch-CVE-2021-26294,enabled,0.2,Detects unauthorized access to AfterLogic Aurora/WebMail Pro WebDAV endpoint using default caldav_public_user credentials and path traversal.,appsec-rules
crowdsecurity/vpatch-CVE-2021-3129,enabled,0.5,Laravel with Ignition Debug Mode RCE (CVE-2021-3129),appsec-rules
crowdsecurity/vpatch-CVE-2021-32478,enabled,0.1,Detects reflected XSS and open redirect in Moodle LTI authorization endpoint via unsanitized redirect_uri parameter.,appsec-rules
crowdsecurity/vpatch-CVE-2021-34427,enabled,0.1,Detects JSP injection leading to remote code execution in Eclipse BIRT Viewer via crafted query parameters.,appsec-rules
crowdsecurity/vpatch-CVE-2021-43798,enabled,0.5,Grafana - Arbitrary File Read (CVE-2021-43798),appsec-rules
crowdsecurity/vpatch-CVE-2021-44529,enabled,0.2,Detects code injection in Ivanti EPM CSA via cookie manipulation (CVE-2021-44529),appsec-rules
crowdsecurity/vpatch-CVE-2022-1388,enabled,0.1,Detects F5 BIG-IP iControl REST authentication bypass and RCE via crafted POST to /mgmt/tm/util/bash with X-F5-Auth-Token header.,appsec-rules
crowdsecurity/vpatch-CVE-2022-22954,enabled,0.3,VMWare Workspace ONE Access RCE (CVE-2022-22954),appsec-rules
crowdsecurity/vpatch-CVE-2022-22965,enabled,0.2,Spring4Shell - RCE (CVE-2022-22965),appsec-rules
crowdsecurity/vpatch-CVE-2022-24086,enabled,0.1,Detects RCE in Adobe Commerce (Magento) via crafted JSON in checkout process (CVE-2022-24086),appsec-rules
crowdsecurity/vpatch-CVE-2022-25322,enabled,0.2,Detects SQL injection attempts in ZEROF Web Server 2.0 via /HandleEvent endpoint.,appsec-rules
crowdsecurity/vpatch-CVE-2022-25488,enabled,0.5,Atom CMS - SQLi (CVE-2022-25488),appsec-rules
crowdsecurity/vpatch-CVE-2022-26134,enabled,0.2,Confluence - RCE (CVE-2022-26134),appsec-rules
crowdsecurity/vpatch-CVE-2022-27926,enabled,0.4,Zimbra Collaboration XSS (CVE-2022-27926),appsec-rules
crowdsecurity/vpatch-CVE-2022-31499,enabled,0.1,Detects remote command injection in Nortek Linear eMerge E3-Series via ReaderNo parameter.,appsec-rules
crowdsecurity/vpatch-CVE-2022-3236,enabled,0.1,Detects code injection in Sophos Firewall User Portal and Webadmin via JSON parameter,appsec-rules
crowdsecurity/vpatch-CVE-2022-3254,enabled,0.1,Detects unauthenticated SQL injection in AWP Classifieds via admin-ajax.php action awpcp-get-regions-options.,appsec-rules
crowdsecurity/vpatch-CVE-2022-35914,enabled,0.6,GLPI RCE (CVE-2022-35914),appsec-rules
crowdsecurity/vpatch-CVE-2022-38627,enabled,0.2,Detects SQL injection vulnerability in Linear eMerge E3-Series via idt parameter,appsec-rules
crowdsecurity/vpatch-CVE-2022-41082,enabled,0.1,Microsoft Exchange - RCE (CVE-2022-41082),appsec-rules
crowdsecurity/vpatch-CVE-2022-44877,enabled,0.3,CentOS Web Panel 7 RCE (CVE-2022-44877),appsec-rules
crowdsecurity/vpatch-CVE-2022-46169,enabled,0.6,Cacti RCE (CVE-2022-46169),appsec-rules
crowdsecurity/vpatch-CVE-2023-0297,enabled,0.1,"Detects pre-auth remote code execution in PyLoad via code injection in the ""jk"" parameter of /flash/addcrypted2.",appsec-rules
crowdsecurity/vpatch-CVE-2023-0600,enabled,0.1,WP Visitor Statistics - SQL Injection (CVE-2023-0600),appsec-rules
crowdsecurity/vpatch-CVE-2023-0900,enabled,0.1,AP Pricing Tables Lite - SQL Injection (CVE-2023-0900),appsec-rules
crowdsecurity/vpatch-CVE-2023-1389,enabled,0.1,TP-Link Archer AX21 - RCE (CVE-2023-1389),appsec-rules
crowdsecurity/vpatch-CVE-2023-2009,enabled,0.1,Pretty Url - XSS (CVE-2023-2009),appsec-rules
crowdsecurity/vpatch-CVE-2023-20198,enabled,0.7,CISCO IOS XE Account Creation (CVE-2023-20198),appsec-rules
crowdsecurity/vpatch-CVE-2023-22515,enabled,0.5,Atlassian Confluence Privesc (CVE-2023-22515),appsec-rules
crowdsecurity/vpatch-CVE-2023-22527,enabled,0.3,RCE using SSTI in Confluence (CVE-2023-22527),appsec-rules
crowdsecurity/vpatch-CVE-2023-23063,enabled,0.2,Detects local file disclosure in Cellinx NVT Web Server via GetFileContent.cgi PATH parameter.,appsec-rules
crowdsecurity/vpatch-CVE-2023-23488,enabled,0.3,Wordpress Paid Memberships Pro Blind SQLi (CVE-2023-23488),appsec-rules
crowdsecurity/vpatch-CVE-2023-23489,enabled,0.2,WordPress Easy Digital Downloads plugin SQL injection (CVE-2023-23489),appsec-rules
crowdsecurity/vpatch-CVE-2023-23752,enabled,0.1,Joomla! Webservice - Password Disclosure (CVE-2023-23752),appsec-rules
crowdsecurity/vpatch-CVE-2023-24000,enabled,0.1,Detects SQL injection attempts in WordPress GamiPress plugin via trigger_type[] parameter.,appsec-rules
crowdsecurity/vpatch-CVE-2023-24489,enabled,0.3,Citrix ShareFile RCE (CVE-2023-24489),appsec-rules
crowdsecurity/vpatch-CVE-2023-28121,enabled,0.2,WooCommerce auth bypass (CVE-2023-28121),appsec-rules
crowdsecurity/vpatch-CVE-2023-3169,enabled,0.1,Detects unauthenticated stored XSS in tagDiv Composer via compiled_css parameter in /wp-json/tdw/save_css,appsec-rules
crowdsecurity/vpatch-CVE-2023-3197,enabled,0.1,Detects unauthenticated SQL injection in WordPress MStore API plugin via id parameter.,appsec-rules
crowdsecurity/vpatch-CVE-2023-33617,enabled,0.5,Atlassian Confluence Privesc (CVE-2023-33617),appsec-rules
crowdsecurity/vpatch-CVE-2023-34362,enabled,0.7,MOVEit Transfer RCE (CVE-2023-34362),appsec-rules
crowdsecurity/vpatch-CVE-2023-35078,enabled,0.2,MobileIron Core Remote Unauthenticated API Access (CVE-2023-35078),appsec-rules
crowdsecurity/vpatch-CVE-2023-35082,enabled,0.3,MobileIron Core Remote Unauthenticated API Access (CVE-2023-35082),appsec-rules
crowdsecurity/vpatch-CVE-2023-3519,enabled,0.4,Citrix RCE (CVE-2023-3519),appsec-rules
crowdsecurity/vpatch-CVE-2023-35708,enabled,0.1,Detects SQL injection attempts in MOVEit Transfer via machine.aspx endpoint and crafted X-IPSGW-ClientCert header.,appsec-rules
crowdsecurity/vpatch-CVE-2023-38205,enabled,0.4,Adobe ColdFusion Access Control Bypass (CVE-2023-38205),appsec-rules
crowdsecurity/vpatch-CVE-2023-40044,enabled,0.4,WS_FTP .NET deserialize RCE (CVE-2023-40044),appsec-rules
crowdsecurity/vpatch-CVE-2023-42793,enabled,0.4,JetBrains Teamcity Auth Bypass (CVE-2023-42793),appsec-rules
crowdsecurity/vpatch-CVE-2023-4634,enabled,0.3,Media Library Assistant - RCE 2023 4634,appsec-rules
crowdsecurity/vpatch-CVE-2023-46805,enabled,0.5,Ivanti Connect Auth Bypass (CVE-2023-46805),appsec-rules
crowdsecurity/vpatch-CVE-2023-47218,enabled,0.2,QNAP QTS - RCE (CVE-2023-47218),appsec-rules
crowdsecurity/vpatch-CVE-2023-49070,enabled,0.1,Apache OFBiz - RCE (CVE-2023-49070),appsec-rules
crowdsecurity/vpatch-CVE-2023-50164,enabled,0.7,Apache Struts2 Path Traversal (CVE-2023-50164),appsec-rules
crowdsecurity/vpatch-CVE-2023-6000,enabled,0.1,Detects unauthenticated stored XSS in WordPress Popup Builder plugin via sgpb-WillOpen parameter.,appsec-rules
crowdsecurity/vpatch-CVE-2023-6360,enabled,0.1,WordPress My Calendar - SQL Injection (CVE-2023-6360),appsec-rules
crowdsecurity/vpatch-CVE-2023-6553,enabled,0.2,Backup Migration plugin for WordPress RCE (CVE-2023-6553),appsec-rules
crowdsecurity/vpatch-CVE-2023-6567,enabled,0.1,LearnPress - SQL Injection (CVE-2023-6567),appsec-rules
crowdsecurity/vpatch-CVE-2023-6623,enabled,0.3,Wordpress Essential Blocks plugin LFI (CVE-2023-6623),appsec-rules
crowdsecurity/vpatch-CVE-2023-7028,enabled,0.3,Gitlab Password Reset Account Takeover (CVE-2023-7028),appsec-rules
crowdsecurity/vpatch-CVE-2024-0012,enabled,0.1,PanOS - Authentication Bypass (CVE-2024-0012),appsec-rules
crowdsecurity/vpatch-CVE-2024-0204,enabled,0.1,Detects authentication bypass in Fortra GoAnywhere MFT via path traversal to InitialAccountSetup.xhtml,appsec-rules
crowdsecurity/vpatch-CVE-2024-1061,enabled,0.1,WordPress HTML5 Video Player - SQL Injection (CVE-2024-1061),appsec-rules
crowdsecurity/vpatch-CVE-2024-1071,enabled,0.2,WordPress Ultimate Member - SQL Injection (CVE-2024-1071),appsec-rules
crowdsecurity/vpatch-CVE-2024-1212,enabled,0.4,Progress Kemp LoadMaster Unauthenticated Command Injection (CVE-2024-1212),appsec-rules
crowdsecurity/vpatch-CVE-2024-22024,enabled,0.1,Ivanti Connect Secure - XXE (CVE-2024-22024),appsec-rules
crowdsecurity/vpatch-CVE-2024-23897,enabled,0.5,Jenkins CLI RCE (CVE-2024-23897),appsec-rules
crowdsecurity/vpatch-CVE-2024-27198,enabled,0.5,Teamcity - Authentication Bypass (CVE-2024-27198),appsec-rules
crowdsecurity/vpatch-CVE-2024-27292,enabled,0.3,Local File Inclusion - DocSource: crowdsecurity/crowdsec