Modsecurity Owasp Modsecurity Core Rule Set
6 CVEs affecting Modsecurity Owasp Modsecurity Core Rule Set. Latest disclosed: 2019-07-09. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-13464 | High | 7.5 | 2019-07-09 | An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script Uploads rules, becau… |
CVE-2019-11391 | Medium | 5.3 | 2019-04-21 | An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause… |
CVE-2019-11390 | Medium | 5.3 | 2019-04-21 | An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause… |
CVE-2019-11389 | Medium | 5.3 | 2019-04-21 | An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause… |
CVE-2019-11388 | Medium | 5.3 | 2019-04-21 | An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf allows remote attackers to cause… |
CVE-2019-11387 | Medium | 5.3 | 2019-04-21 | An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf allows remote attackers to caus… |