medium5.3
CVE-2019-25043
ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string index out of range" error and worker-process crash for a "Cookie: …
Impact
ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string index out of range" error and worker-process crash for a "Cookie: =abc" header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owasp | Modsecurity | from 3.0.0 before 3.0.4 |