Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler (for get_uri_args or get_post_args) to block the API misuse described in CVE-2018-9230.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
VeryNginx 安全特征问题漏洞
Vulnerability Description
VeryNginx是一款基于lua-nginx-module（openresty）的服务器软件。该软件提供WAF、控制面板和仪表板等功能。 VeryNginx 0.3.3版本中存在安全漏洞，该漏洞源于该软件缺少错误处理器。远程攻击者可利用该漏洞绕过Web应用程序防火墙功能。
CVSS Information
N/A
Vulnerability Type
N/A