Lucene search

K
osvGoogleOSV:CVE-2019-13464
HistoryJul 09, 2019 - 7:15 p.m.

CVE-2019-13464

2019-07-0919:15:12
Google
osv.dev
7

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.9%

An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script Uploads rules, because PHP automatically transforms dots into underscores in certain contexts where dots are invalid.

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.9%