TI-2018-14173 CVE-2018-19991 · GHSA-x3gm-fcg7-59j9VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature…Priority MEDIUM 47VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler (for get_uri_args or get_post_args) to block the API misuse described in CVE-2018-9230.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02326 · Published 2018-12-10 · No fix listed CWE-755
