Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-19886
7.5
HIGHCVSS v3
Published
January 21, 2020
CVSS v2
5 MEDIUM
Affected
5 projects
Assigned by
MITRE
Severity scale
010
Description
Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may, when sent quickly in large volumes, lead to the server becoming slow or unresponsive (Denial of Service) because of a flaw in Transaction::addRequestHeader in transaction.cc.
owasp-modsecurity/ModSecurity
GitHubModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
GitHubModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.= *, >= 3.0.0, <= 3.0.3NVD
Crates.io
Docker Hub
NPM
RubyGems