Skip to content

Instantly share code, notes, and snippets.

@lynt-smitka

lynt-smitka/CVE-2018-6389.conf

Last active April 17, 2018 13:26
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save lynt-smitka/2e70bbdc0e36ef31ac3e694e3fc24f6f to your computer and use it in GitHub Desktop.
Save lynt-smitka/2e70bbdc0e36ef31ac3e694e3fc24f6f to your computer and use it in GitHub Desktop.
Download ZIP
Raw
CVE-2018-6389.conf
#block load-scripts|styles.php requests with long argument list
#CVE-2018-6389 impact mitigation
if ($request_uri ~* "^/+wp-admin/+load-(scripts|styles)\.php\?.{800,}$"){
return 403;
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment