CVE-2018-13065

ModSecurity 3.0.0 has XSS via an onerror attribute of an IMG element. NOTE: a third party has disputed this issue because it may only apply to environ...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

ModSecurity 3.0.0 has XSS via an onerror attribute of an IMG element. NOTE: a third party has disputed this issue because it may only apply to environments without a Core Rule Set configured

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory hackings8n.blogspot.com
web exploit-db.com