search

coreruleset / wordpress-rule-exclusions-plugin

Rule exclusion plugin for WordPress.
Apache License 2.0
10 stars 6 forks source link

wp-admin/edit-tags.php #57

Open baptiste-fourmont opened 3 weeks ago

baptiste-fourmont commented 3 weeks ago

Hello,

I got these error when i try to edit tags on wordpress (website/wp-admin/edit-tags.php). It is legit, did someone know how to fix it?

 ModSecurity: Access denied with code 403 (phase 2).`TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `25' ) [file "/usr/local/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.6.0-dev"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "WHOOPS"] [uri "/wp-admin/edit-tags.php"] [unique_id ""] [ref ""], client: WHOOPS, server: WHOOPS, request: "POST /wp-admin/edit-tags.php HTTP/1.1", host: "WHOOPS", referrer: "https:/website/wp-admin/term.php?taxonomy=category&tag_ID=001&post_type=post&lang=en&wp_http_referer=%2Fwp-admin%2Fedit-tags.php%3Ftaxonomy%3Dcategory"
EsadCetiner commented 3 weeks ago

@baptiste-fourmont Thanks for the report, unfortunately the log line you provided isn't very detailed so there's not much to go on.

If you search for [unique_id ""] (looks like you removed the id in your post) in your modsec_audit.log you should find a detailed transaction log about the false positive.