High severity7.5NVD Advisory· Published Jul 9, 2019· Updated Jun 17, 2026
CVE-2019-13464
CVE-2019-13464
Description
An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script Uploads rules, because PHP automatically transforms dots into underscores in certain contexts where dots are invalid.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: =3.0.2
- OWASP/ModSecurity Core Rule Setdescription
- cpe:2.3:a:modsecurity:owasp_modsecurity_core_rule_set:3.0.2:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- github.com/SpiderLabs/owasp-modsecurity-crs/issues/1386nvdExploitThird Party Advisory
- github.com/SpiderLabs/owasp-modsecurity-crs/pull/1391nvdThird Party Advisory
News mentions
0No linked articles in our index yet.