CVE-2019-13464

An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2

published July 9, 2019

CVSS
—
EPSS
1%
Percentile
73.5
In the wild
Unconfirmed
What it is

An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script Uploads rules, because PHP automatically transforms dots into underscores in certain contexts where dots are invalid.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01466 · 73.5th percentile
Published
2019-07-09T18:07Z
EPSS history
Timeline
  • 09 JUL 18:07Z
    An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2
    cvelistv5