CVE-2018-16384 in Trustwave and OWASP Products
Published on September 3, 2018
A SQL injection bypass (aka PL1 bypass) exists in OWASP ModSecurity Core Rule Set (owasp-modsecurity-crs) through v3.1.0-rc3 via {`a`b} where a is a special function name (such as "if") and b is the SQL statement to be executed.
Products Associated with CVE-2018-16384
stack.watch emails you whenever new vulnerabilities are published in Trustwave Owasp Modsecurity Core Rule Set or Owasp Modsecurity Core Rule Set. Just hit a watch button to start following.
Exploit Probability
EPSS
0.14%
Percentile
33.80%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.