Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-5705
5
MEDIUMCVSS v2
Published
April 15, 2014
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header.
owasp-modsecurity/ModSecurity
GitHubModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
GitHubModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.< 2.7.6NVD