UpHeron
All vulnerabilities

Servers and applications

CVE-2019-19886

Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may, when sent quickly in large volumes, lead to the server becoming slow or unresponsive (Denial of Service) because of a flaw in Transaction::addRequestHeader in transaction.cc.

Severity
High 7.5
Published
21 Jan 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
2.5% in the next 30 daysHigher than 84% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
ModSecurityServers and applications · cpe:a:owasp:modsecurity
  • From 3.0.0 up to 3.0.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-19886
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-19886