CVE-2019-11387

概要

参考情報

• coreruleset.org/20190627/announcement-owasp-modsecurity-core-rule-set-version-3-1-1 · Release Notes
• SpiderLabs/owasp-modsecurity-crs · Release Notes
• SpiderLabs/owasp-modsecurity-crs · Issue Tracking

owasp modsecurity core rule set のその他の脆弱性

• CVE-2019-13464高 7.5An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script U…
• CVE-2019-11391中 5.3An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote…
• CVE-2019-11390中 5.3An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote…
• CVE-2019-11389中 5.3An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote…
• CVE-2019-11388中 5.3An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf allows remote…