Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rx: regex error 'MATCH_LIMIT' for pattern #3237

Open
Lathanderjk opened this issue Aug 23, 2024 · 1 comment
Open

rx: regex error 'MATCH_LIMIT' for pattern #3237

Lathanderjk opened this issue Aug 23, 2024 · 1 comment
Labels
3.x Related to ModSecurity version 3.x

Comments

@Lathanderjk
Copy link

Lathanderjk commented Aug 23, 2024

Describe the bug

I don't see any real problem just noticed logs entries.

Logs and dumps
SecDebugLog & SecDebugLogLevel 3

[172440041140.141021]` [/vystrelovaci-rukavice-3-sipky/] [1] rx: regex error 'MATCH_LIMIT' for pattern '[\"'`][\[\{].*[\]\}][\"'`].*(::.*jsonb?)?.*(?:(?:@|->?)>|<@|\?[&\|]?|#>>?|[<>]|<-)|(?:(?:@|->?)>|<@|\?[&\|]?|#>>?|[<>]|<-)[\"'`][\[\{].*[\]\}][\"'`]|json_extract.*\(.*\)

Server:

  • ModSecurity version (and connector): libmodsecurity 3.0.12 & lattest nginx-connector
  • WebServer: nginx 1.27.1
  • OS (and distro): Oracle Linux 8.10 x86_64

Rule Set:

  • CRS v4.5.0
@Lathanderjk Lathanderjk added the 3.x Related to ModSecurity version 3.x label Aug 23, 2024
@airween
Copy link
Member

airween commented Aug 23, 2024

Hi @Lathanderjk,

thanks for reporting. We have to investigate this issue, but after a first sight I think it's more a CRS issue than ModSecurity.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
3.x Related to ModSecurity version 3.x
Projects
None yet
Development

No branches or pull requests

2 participants