Vulnerabilities > CVE-2018-19991 - Improper Handling of Exceptional Conditions vulnerability in Verynginx Project Verynginx 0.3.3
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler (for get_uri_args or get_post_args) to block the API misuse described in CVE-2018-9230.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |