Vulnerability record/PUBLISHED/Published Apr 21, 2019 01:15:03 UTC
CVE-2019-11388
An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with nested repetition operators. NOTE: the software maintainer disputes that this is a vulnerability because the issue cannot be exploited via ModSecurity
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authoritymitre
Last updatedAug 28, 2024 13:17:14 UTC
PublishedApr 21, 2019 01:15:03 UTC
ReservedApr 20, 2019 00:00:00 UTC