ModSceurity 2.5.11 fixes an evasion vulnerability

Breach has release a new version of ModSecurity which fixes a vulnerability that may lead to an evasion. As stated in the release announcement sent to the mailing list by Brian Rectanus, by using non-standard (but accepted by some platforms) quoting, ModSecurity may be fooled into thinking some parameters are uploaded files.

The vulnerability was presented by  Stefan Esser at POC 2009 in Seol and not posted online yet.