List view

mod_security causes CGI scripts to timeout

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Platform - Apache

Status: Open.

#2101 In owasp-modsecurity/ModSecurity;

· markblackman opened on May 22, 2019

Don't run request body completion checks when ProcessPartial and the input filter has't seen all of the body

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

enhancement

pr available

Status: Open.

#2093 In owasp-modsecurity/ModSecurity;

· rainerjung opened on May 14, 2019

Windows Server 2016 / IIS Cannot Disable for site

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Platform - IIS

workaround availableThe issue has either a temporary or permanent workaround availableThe issue has either a temporary or permanent workaround available

Status: Open.

#2082 In owasp-modsecurity/ModSecurity;

· jdornan opened on May 6, 2019

Multipart: Final boundary missing.

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

workaround availableThe issue has either a temporary or permanent workaround availableThe issue has either a temporary or permanent workaround available

Status: Open.

#1471 In owasp-modsecurity/ModSecurity;

· tomsommer opened on Jun 26, 2017

rotatelogs.exe Not Working in IIS 10 with v2.9.3

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Platform - IIS

workaround availableThe issue has either a temporary or permanent workaround availableThe issue has either a temporary or permanent workaround available

Status: Open.

#2075 In owasp-modsecurity/ModSecurity;

· ossie-git opened on Apr 21, 2019

Bad performance when used with threaded mpms and a libapr compiled with "--enable-allocator-uses-mmap" option

Platform - Apache

Status: Open.

#768 In owasp-modsecurity/ModSecurity;

· zimmerle opened on Aug 18, 2014

IIS MSI installers not following MS standard for digital signature

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

enhancement

Platform - IIS

workaround availableThe issue has either a temporary or permanent workaround availableThe issue has either a temporary or permanent workaround available

Status: Open.

#1999 In owasp-modsecurity/ModSecurity;

· victorhora opened on Jan 11, 2019

customize drop status code replacement on Windows

enhancement

Platform - IIS

Status: Open.

#328 In owasp-modsecurity/ModSecurity;

· rcbarnett-zz opened on Oct 17, 2013

rsub capturing group

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

enhancement

RIP - Type - Feature

Status: Open.

#828 In owasp-modsecurity/ModSecurity;

· ekoome opened on Jan 18, 2015

ModSecurity IIS module add content-length when chunked transfer encoding is enabled

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

enhancement

Platform - IIS

pr available

Status: Open.

#1364 In owasp-modsecurity/ModSecurity;

· maverick64 opened on Mar 24, 2017

Response body scanning conflicts with mod_deflate

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

enhancement

pending feedback

Status: Open.

#944 In owasp-modsecurity/ModSecurity;

· lifeforms opened on Oct 15, 2015

Few types change can be safely

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

pending feedback

RIP - Type - Config Improvement

Status: Open (in progress).

owasp-modsecurity/ModSecuritynumber 1624

#1624 In owasp-modsecurity/ModSecurity;

· ghost opened on Nov 28, 2017

ModSecurity IIS startup message is flooding the event log

enhancement

Platform - IIS

RIP - Type - Feature

Status: Open.

#784 In owasp-modsecurity/ModSecurity;

· zimmerle opened on Oct 8, 2014

Redirect action does not work properly in IIS

Platform - IIS

Status: Open.

#729 In owasp-modsecurity/ModSecurity;

· oniric85 opened on May 27, 2014

IIS8.5 - ModSecurity 2.8 - Access denied folder loop handling prevents proper config loading

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

bugIt is a confirmed bugIt is a confirmed bug

Platform - IIS

Status: Open.

#812 In owasp-modsecurity/ModSecurity;

· sAnexeh opened on Dec 9, 2014

Operator validateurlencoding does not handle IIS url encoding "%uXXXX"

Platform - IIS

Status: Open.

#704 In owasp-modsecurity/ModSecurity;

· tailianos opened on Apr 17, 2014

Issue with @inspectFile CGI environment variable PATH_TRANSLATED

bugIt is a confirmed bugIt is a confirmed bug

Platform - Apache

RIP - Type - Feature

Status: Open.

#868 In owasp-modsecurity/ModSecurity;

· TobiasGrave opened on Apr 16, 2015

XML parser does not properly return values with anonymous namespaces

enhancement

Status: Open.

#947 In owasp-modsecurity/ModSecurity;

· csanders-git opened on Oct 21, 2015

<code>utf8toUnicode</code> encodes to ambigious hex sequences

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

enhancement

waiting for v3New feature in v2 that is not yet available in v3. Therefore, not yet released.New feature in v2 that is not yet available in v3. Therefore, not yet released.

Status: Open.

#1211 In owasp-modsecurity/ModSecurity;

· katef opened on Sep 10, 2016

@validateSchema or xml body parser in others that are not the request body

3.xRelated to ModSecurity version 3.xRelated to ModSecurity version 3.x

enhancement

RIP - libmodsecurity

Status: Open.

#739 In owasp-modsecurity/ModSecurity;

· zimmerle opened on Jun 13, 2014