DEBIAN-CVE-2019-13464

An issue was discovered in OWASP ModSecurity Core Rule Set CRS 3.0.2. Use of X.Filename instead of XFilename can bypass some PHP Script Uploads rules, because PHP automatically transforms dots into underscores in certain contexts where dots are invalid...

CVE-2019-13464

CVE-2019-13464 affects the OWASP ModSecurity Core Rule Set (CRS) 3.0.2. The issue is that using X.Filename instead of X_Filename can bypass some PHP Script Uploads rules because PHP converts dots to underscores in contexts where dots are invalid, allowing certain uploads to escape detection. Publ...