Lucene search

K
osvGoogleOSV:CVE-2018-11783
HistoryMar 07, 2019 - 6:29 p.m.

CVE-2018-11783

2019-03-0718:29:00
Google
osv.dev
2

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn’t strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 to 8.0.1.

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%