Skip to content
This repository has been archived by the owner on May 14, 2020. It is now read-only.

Issues: SpiderLabs/owasp-modsecurity-crs

39 Open 927 Closed
39 Open 927 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

False positive with WordPress when hosted from http://example.com/update-prefix False Positive
#1756 opened May 11, 2020 by morko
1
false positive on rule 932110 False Positive
#1754 opened May 9, 2020 by randyoo
Note config change of tx.allowed_request_content_type in the v3.3 release notes
#1752 opened May 5, 2020 by franbuehler
WordPress JetPack False Positive False Positive
#1737 opened Apr 11, 2020 by manuelroccon
@lifeforms
NextCloud False Positive False Positive
#1736 opened Apr 11, 2020 by manuelroccon
@fzipi
9
XSS Attack Detected via libinjection for AWS AWSALBCORS Cookie False Positive
#1729 opened Mar 31, 2020 by frankyhun
4
SQLi bypass at PL1(CRS 3.2.0) False Negative - Evasion
#1727 opened Mar 28, 2020 by seedis
1
DoS rule triggering with static (png) file False Positive
#1726 opened Mar 28, 2020 by ceandre
@fzipi
Easy to trigger these rule id blocks just with keywords [932115, 942360] False Positive
#1725 opened Mar 25, 2020 by jeremyjpj0916
Crazy Long Processing time of XML of a certain kinda payload body. Bug
#1724 opened Mar 18, 2020 by jeremyjpj0916
2
XSS Attack Detected for valid XML Wrapped in CDATA Id 941160 False Positive
#1720 opened Mar 12, 2020 by jeremyjpj0916
FP 942100 MySQLi rule triggered? False Positive libinjection
#1711 opened Mar 5, 2020 by jeremyjpj0916
@franbuehler
3
XSS bypass with a payload not containing "<script>" False Negative - Evasion
#1705 opened Feb 28, 2020 by dune73
PrestaShop: FP on REQUEST_COOKIE False Positive libinjection
#1704 opened Feb 28, 2020 by theMiddleBlue
@theMiddleBlue
Blocking Object as get arguments gets blocked with Rule REQUEST-949-BLOCKING-EVALUATION.conf False Positive
#1700 opened Feb 26, 2020 by impondesk
The word "Warning" causes "PCRE limit exceeded" Bug
#1689 opened Feb 13, 2020 by mricherzhagen
3
Wordpress preview page false positive on REQUEST-949-BLOCKING-EVALUATION False Positive
#1669 opened Jan 26, 2020 by podguzovvasily
Regression Tests in CRS doesn't have Tests for some of the CRS Rules Bug
#1666 opened Jan 22, 2020 by srikr
@franbuehler
4
Rule 941120 Processing time is too long
#1665 opened Jan 19, 2020 by sunskyyao
@airween
6
Rule 941310: False positive False Positive
#1645 opened Dec 4, 2019 by Rolandwalraven
19
Rule 933210 PHP Injection Attack FP False Positive
#1626 opened Nov 19, 2019 by emphazer
@lifeforms @theMiddleBlue
6
Rule 921120: False positive False Positive PR available this issue is referenced by an active pull request
#1615 opened Oct 29, 2019 by Taiki-San
1
@franbuehler
6
Rule 921130: False positive False Positive Meeting Agenda
#1609 opened Oct 24, 2019 by Taiki-San
@franbuehler
7
Rule 942230: False positive False Positive PR available this issue is referenced by an active pull request
#1607 opened Oct 24, 2019 by Taiki-San
1
@franbuehler
3
Make ModSecurity CRS repositories easier to manage
#1600 opened Oct 17, 2019 by soufianebenali
22
ProTip! Adding no:label will show everything without a label.