CVE-2019-11389

概要

参考情報

• SpiderLabs/owasp-modsecurity-crs · Issue Tracking
• SpiderLabs/owasp-modsecurity-crs · Exploit

owasp modsecurity core rule set のその他の脆弱性

• CVE-2019-13464高 7.5An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script U…
• CVE-2019-11391中 5.3An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote…
• CVE-2019-11390中 5.3An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote…
• CVE-2019-11388中 5.3An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf allows remote…
• CVE-2019-11387中 5.3An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf allows remot…