CVE-2025-47947 | OWASP ModSecurity up to 2.9.8 JSON Content Type excessive platform resource consumption within a loop (GHSA-859r-vvv8-rm8r / ID 3389)

A vulnerability, which was classified as critical, was found in OWASP ModSecurity up to 2.9.8. This affects an unknown part of the component JSON Content Type Handler. The manipulation leads to excessive platform resource consumption within a loop.

This vulnerability is uniquely identified as CVE-2025-47947. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to apply a patch to fix this issue.