Top owasp-modsecurity-crs issues

rc2 apache 2.2.15 configtest error REQUEST-932-APPLICATION-ATTACK-RCE

emphazer picture emphazer·19 Aug 2016·31 Comments

RCE detection bypass at PL1

False Negative - Evasion PR available
dune73 picture dune73·19 Aug 2019·6 Comments

Regarding the ReDOS exploit strings & the un-reproducibility

Stale issue
s0md3v picture s0md3v·28 Apr 2019·5 Comments
👍1

Vulnerable regexp in rule 942260, 942490 (was: 942330)

s0md3v picture s0md3v·15 Apr 2019·16 Comments

The modsecurity.log sometimes will not produce new log util i restart nginx

meigea picture meigea·25 Oct 2018·4 Comments

Content-Type: ... charset=ibm037 and friends allow for a bypass

False Negative - Evasion
dune73 picture dune73·8 Jul 2018·21 Comments

tx.paranoia_level on v3/master ignored

ModSec
theMiddleBlue picture theMiddleBlue·15 Jun 2018·13 Comments

February monthly meeting agenda

spartantri picture spartantri·1 Feb 2018·3 Comments
👍2

update main GH page to be official website

Stale issue
efx picture efx·15 Jan 2018·13 Comments

921100 incorrectly forbids "," (commas) in Transfer-Encoding

fgsch picture fgsch·27 Nov 2017·24 Comments
 Previous issues
Next issues