Skip to content
OpenAdvisories
Unscored CVE-2018-19991 EUVD-2018-11658GHSA-x3gm-fcg7-59j9

VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler (for get_uri_args …

Published Dec 10, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler (for get_uri_args or get_post_args) to block the API misuse described in CVE-2018-9230.

References