Skip to content

Issues: coreruleset/coreruleset

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

89 Open 2,571 Closed
89 Open 2,571 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Rule 932370 has false positive for "At" after newline ➕ False Positive
#3953 opened Dec 13, 2024 by ssigwart
1 task done
2
Monthly Chat Agenda December 2024 (2024-12-02 and 2024-12-16) 🔖 Meeting Agenda
#3950 opened Dec 2, 2024 by fzipi
1
False Positive Issue: Blocking Return Redirects When Integrating Furgonetka Module with Prestashop API ➕ False Positive
#3938 opened Nov 16, 2024 by Munrok
1
942100 False Positive matching sos fingerprint ➕ False Positive
#3937 opened Nov 15, 2024 by Muffinman
2
false positive alarms for Cloudflare OWASP Core Ruleset rule configured via cloudflare ➕ False Positive
#3935 opened Nov 13, 2024 by musaffersherrif1
1
False positives with 941310 PL1 US-ASCII Malformed Encoding XSS Filter - Attack Detected 🇬🇧 DEV Retreat Issues to be worked while at the Woburn Forest Retreat ➕ False Positive
#3933 opened Nov 5, 2024 by dune73
2
False positives with 932235 PL1 Remote Command Execution: Unix Command Injection (command without evasion) 🇬🇧 DEV Retreat Issues to be worked while at the Woburn Forest Retreat ➕ False Positive
#3932 opened Nov 5, 2024 by dune73
3
False positives with 933160 PL1 PHP Injection Attack: High-Risk PHP Function Call Found 🇬🇧 DEV Retreat Issues to be worked while at the Woburn Forest Retreat ➕ False Positive
#3931 opened Nov 5, 2024 by dune73
1
False positives with 932380 PL1 Remote Command Execution: Windows Command Injection 🇬🇧 DEV Retreat Issues to be worked while at the Woburn Forest Retreat ➕ False Positive
#3930 opened Nov 5, 2024 by dune73
False positives with 942151 PL1 SQL Injection Attack: SQL function name detected 🇬🇧 DEV Retreat Issues to be worked while at the Woburn Forest Retreat ➕ False Positive
#3929 opened Nov 5, 2024 by dune73
3
False positives with 932125 PL1 Remote Command Execution: Windows Powershell Alias Command Injection 🇬🇧 DEV Retreat Issues to be worked while at the Woburn Forest Retreat ➕ False Positive
#3928 opened Nov 5, 2024 by dune73
920220 PL1 / 920221 PL1 have a lot of false positives with unencoded percent signs in URIs (-> query strings) 🇬🇧 DEV Retreat Issues to be worked while at the Woburn Forest Retreat ➕ False Positive
#3926 opened Nov 3, 2024 by dune73
@franbuehler
9
Some rules are NOT doing IIS specific decoding of ARGS* data 👍 Feature Request
#3919 opened Nov 2, 2024 by azurit
Invalid bash snippet in restricted-upload.data 🐛 bug Something isn't working
#3916 opened Nov 1, 2024 by OhMyVolk
6
Rule 942-APPLICATION-ATTACK-SQLI (id: 942360) contain false positive ➕ False Positive
#3914 opened Oct 31, 2024 by abudawud
6
Review v3 and enhance compatibility with v4 processes 👍 Feature Request
#3912 opened Oct 29, 2024 by fzipi
7
Usage of limited characters 🐛 bug Something isn't working ➖ False Negative - Evasion
#3902 opened Oct 28, 2024 by Xhoenix
5
id 933150 can raise many false positive and i should to disable it ➕ False Positive
#3899 opened Oct 25, 2024 by abudawud
3
Overly restrictive allowed charset list creating a large amount of false positive 920600 and 920480 rule matchings ➕ False Positive
#3896 opened Oct 21, 2024 by sandumjacob
2
Gather a list of rules candidates for retirement
#3895 opened Oct 20, 2024 by fzipi
move crs-rules-check to its own repository
#3892 opened Oct 19, 2024 by fzipi
3 tasks
1
Look at the find-rules-without-testas it is part of CI/CD tools
#3880 opened Oct 19, 2024 by fzipi
1
Update move sql operators to an include file and apply in different rules
#3866 opened Oct 17, 2024 by fzipi
1
Look at SAML attacks and create rule to protect form common attacks 👍 Feature Request
#3864 opened Oct 16, 2024 by fzipi
False positive response when usting Drupal ➕ False Positive
#3859 opened Oct 13, 2024 by Munrok
7
ProTip! Adding no:label will show everything without a label.