3 matches found
modsecurity-cve-2018-6389
modsecurity-cve-2018-6389 Ein ModSecurity-Regelsatz zur Erkennung potenzieller Angriffe mit CVE-2018-6389. Weitere Informationen finden Sie unter https://www.rastating.com/protecting-wordpress-against-cve-2018-6389/...
UBUNTU-CVE-2022-39955
The OWASP ModSecurity Core Rule Set CRS is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field that indicates multiple character encoding schemes. A vulnerable back-end can potentially be exploited by declaring multiple Content-Type "charset" nam...
UBUNTU-CVE-2019-11391
DISPUTED An issue was discovered in OWASP ModSecurity Core Rule Set CRS through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service ReDOS by entering a specially crafted string with $a at the beginning and nested repetition operators. NOTE: t...