Skip to content

ModSecurity causes application to crash when uploading files > 10kb #1798

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
tonyzeng91 opened this issue Jun 5, 2018 · 3 comments
Closed
Assignees

Comments

@tonyzeng91
Copy link

tonyzeng91 commented Jun 5, 2018

We have a WAF with nginx and modsecurity. When uploading files bigger than 10kb it causes the application to crash. We have the default modsecurity configuration. Any idea on what is causing this issue?

SecRuleEngine DetectionOnly
SecRequestBodyLimit 13107200 
SecRequestBodyNoFilesLimit 131072
SecResponseBodyLimit 524288
@zimmerle zimmerle self-assigned this Jun 5, 2018
@zimmerle
Copy link
Contributor

zimmerle commented Jun 5, 2018

Hi @tonyzeng91, Can you share with us the version of your ModSecurity?

@tonyzeng91
Copy link
Author

Hi @zimmerle we are using modsecurity 2.9 version.

@zimmerle
Copy link
Contributor

Hi @tonyzeng91,

This issue was a duplicate of #839. You may upgrade to ModSecurity version 3.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants