Modsecurity: Excessive false positives - Stack Overflow
Nov 30, 2015 · I've just set up Apache modsecurity on a server, and in principle it works well, but I am getting rather a lot of false positives. I'm using the OWASP ModSecurity Core Rule Set …
ModSecurity: Access denied with code 403 (phase 2). Pattern …
Jun 28, 2023 · Not the first one with ModSecurity: Access denied with code 403 (phase 2).... issues. But the thing is, I have a server, multiple websites, multiple webmail users and nobody …
ModSecurity False Positive SQL Injection - Stack Overflow
Jul 14, 2020 · So I was able to wrangle several other ModSecurity rules giving false positives for other situations but I'm having issues with this specific ruleset. When customers submit a form …
How can I increase the SecRequestBodyLimit for a single route?
Aug 10, 2023 · 3 I'm using ModSecurity as WAF on my Apache 2 server. Everything works so fine; just when I post bigger JSON data to a special route will the WAF reject my request since …
mod security - Getting ModSecurity: Access denied with code 403 …
Jun 26, 2024 · Getting ModSecurity: Access denied with code 403 because the content of a POST contains the word "Filestore" Asked 1 year, 5 months ago Modified 1 year, 5 months …
403 - modsecurity action in the live website? - Stack Overflow
Sep 7, 2020 · ModSecurity blocks suspicious looking requests to improve security. So it's not so much you don't have permission (which is what a 403 would normally indicate) but something …
How can I disable mod_security in .htaccess file? - Stack Overflow
Oct 17, 2012 · How can we disable mod_security by using .htaccess file on Apache server? I am using WordPress on my personal domain and posting a post which content has some code …
Apache error 500 on large file uploads (mod_security)
The fact you have a ModSecurity alert means that you can't have empty activated_rules folder or you are including the rules in some other way. There are known problems with ModSecurity for …
ModSecurity OWASP 3.3.2 breaking Nextcloud - Stack Overflow
Jan 17, 2023 · 1 Running ModSecurity 2.93, and OWASP ModSecurity Core Rule Set (CRS) 3.3.2. Enabled the Nextcloud exceptions contained in REQUEST-903.9003-NEXTCLOUD …
ModSecurity not detecting DDoS attack on DVWA - Stack Overflow
Apr 13, 2022 · The Project involves the testing of the WAF against malcious attacks, and it works fine for mosts of the attacks, ModSecurity detects and blocks SQL Injection, XSS , FLI, RFI, …