Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-13065
4.3
MEDIUMCVSS v2
Published
July 3, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ModSecurity 3.0.0 has XSS via an onerror attribute of an IMG element. NOTE: a third party has disputed this issue because it may only apply to environments without a Core Rule Set configured
owasp-modsecurity/ModSecurity
GitHubModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
GitHubModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.= 3.0.0NVD