SpiderLabs / owasp-modsecurity-crs

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)

https://modsecurity.org/crs

SpiderLabs/owasp-modsecurity-crs Issues

False positive with WordPress when hosted from http://example.com/update-prefix
Updated 4 years ago1
NextCloud False Positive
Updated 4 years ago9
Incompatible with ModSecurity 3.x?
Closed 4 years ago1
false positive on rule 932110
Updated 4 years ago
Monthly Chat Agenda May (2020-05-04)
Closed 4 years ago1
WordPress JetPack False Positive
Updated 4 years ago
rule 920300 title / details mismatch
Closed 4 years ago1
Note config change of tx.allowed_request_content_type in the v3.3 release notes
Updated 4 years ago
Rule 920450 and modsec 3x
Closed 4 years ago4
SOAPUI SOAP Tx multipart/related call False Positive id: 920470
Closed 4 years ago4
DoS rule triggering with static (png) file
Updated 4 years ago
FP 942100 MySQLi rule triggered?
Updated 4 years ago3
Regression Tests in CRS doesn't have Tests for some of the CRS Rules
Updated 4 years ago4
XSS Attack Detected via libinjection for AWS AWSALBCORS Cookie
Updated 4 years ago4
Password Scrubbing within the libinjection rule
Closed 4 years ago1
JSON Payloads process significantly slower (600%) than XML Payloads of a similar size and format
Closed 4 years ago9
Monthly Chat Agenda April (2020-04-06)
Closed 4 years ago1
SQLi bypass at PL1(CRS 3.2.0)
Updated 4 years ago1
Block QQGameHall in UA
Closed 4 years ago4
Easy to trigger these rule id blocks just with keywords [932115, 942360]
Updated 4 years ago
Crazy Long Processing time of XML of a certain kinda payload body.
Updated 4 years ago2
XSS attack detection for session id in cookie
Closed 4 years ago3
DOS protection is invalid
Closed 4 years ago
XSS Attack Detected for valid XML Wrapped in CDATA Id 941160
Updated 4 years ago
Need help with whitelisting false positive for gitlab rule id 949110
Closed 4 years ago
Vulnerable Regular Expressions in 942170
Closed 4 years ago1
Vulnerable Regular Expressions in 942200
Closed 4 years ago1
Vulnerable Regular Expressions in 942260
Closed 4 years ago1
Vulnerable Regular Expressions in 942300
Closed 4 years ago1
Vulnerable Regular Expressions in 942360
Closed 4 years ago1
PrestaShop: FP on REQUEST_COOKIE
Updated 4 years ago
Monthly Chat Agenda March (2020-03-02)
Closed 4 years ago1
Protocol enforcement 920180 does have problems with HTTP/2
Closed 4 years ago1
Rule 941120 Processing time is too long
Updated 4 years ago6
XSS bypass with a payload not containing "<script>"
Updated 4 years ago
Typos across the board
Closed 4 years ago1
@rx validation required for 933210
Closed 4 years ago9
Blocking Object as get arguments gets blocked with Rule REQUEST-949-BLOCKING-EVALUATION.conf
Updated 4 years ago
Rule 941130 Blocking XML Payload
Closed 4 years ago1
Rule 930120 JSON/XML Bodies with profile in the name or nested reference?
Closed 4 years ago1
Rule 920220 Query Parameters detecting malformed UrlEncoding?
Closed 4 years ago1
REQUEST-941-APPLICATION-ATTACK-XSS.conf on JSON payload
Closed 4 years ago2
The word "Warning" causes "PCRE limit exceeded"
Updated 4 years ago3
Wordpress Problem
Closed 4 years ago1
Monthly Chat Agenda February (extraordinary changed to: 2020-02-10)
Closed 4 years ago3
Rules 911100, 949110, 980130: False Positives (paranoia level 1)
Closed 4 years ago1
MULTIPART_STRICT_ERROR False Positive
Closed 4 years ago1
What happend to the experimental rules from v2?
Closed 4 years ago3
Wordpress preview page false positive on REQUEST-949-BLOCKING-EVALUATION
Updated 4 years ago
Rule 920190 should work with a single range (TBC)
Closed 4 years ago1