Owasp: >> Modsecurity >> 3.0.0 Security Vulnerabilities
Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may, when sent quickly in large volumes, lead to the server becoming slow or unresponsive (Denial of Service) because of a flaw in Transaction::addRequestHeader in transaction.cc.
CVSS Score
7.5
EPSS Score
0.025
Published
2020-01-21
ModSecurity 3.0.0 has XSS via an onerror attribute of an IMG element. NOTE: a third party has disputed this issue because it may only apply to environments without a Core Rule Set configured
CVSS Score
6.1
EPSS Score
0.014
Published
2018-07-03
Page 2