55 or the CRS mailinglist at
66* https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
77
8- == Version 3.2.0 - 9/24/ 2019 ==
8+ == Version 3.2.0 - 2019-09-24 ==
99
1010New functionality:
1111 * Add AngularJS client side template injection 941380 PL2 (Franziska Bühler)
@@ -173,6 +173,7 @@ Documentation:
173173 * Updating crs site location (Chaim Sanders)
174174
175175== Version 3.1.1 - 2019-06-26 ==
176+
176177 * Fix CVE-2019-11387 ReDoS against CRS on ModSecurity 3 at PL 2 (Christoph Hansen, Federico G. Schwindt)
177178 * Content-Type made case insensitive in 920240, 920400 (Federico G. Schwindt)
178179 * Allow % encoding in 920240 (Christoph Hansen)
@@ -181,7 +182,8 @@ Documentation:
181182 * Reduce false positives in 921110 (Yu Yagihashi, Federico G. Schwindt)
182183 * Fix bug in 943120 (XeroChen)
183184
184- == Version 3.1.0 - 8/7/2018 ==
185+ == Version 3.1.0 - 2018-08-07 ==
186+
185187 * Add Detectify scanner (theMiddle)
186188 * Renaming matched_var/s (Victor Hora)
187189 * Remove lines with bare '#' comment char (Walter Hop)
@@ -283,12 +285,12 @@ Documentation:
283285 * Removed deprecated t:removeComments from 942100 (Christian Folini)
284286 * Add word boundary to rule 942410 (Franziska Bühler)
285287
286- == Version 3.0.2 - 5/12/ 2017 ==
288+ == Version 3.0.2 - 2017-05-12 ==
287289
288290 * Remove debug rule that popped up in 3.0.1 (Christian Folini)
289291
290292
291- == Version 3.0.1 - 5/9/ 2017 ==
293+ == Version 3.0.1 - 2017-05-09 ==
292294
293295 * SECURITY: Removed insecure handling of X-Forwarded-For header;
294296 reported by Christoph Hansen (Walter Hop)
@@ -325,7 +327,7 @@ Documentation:
325327 * Fixed bug with DoS rule 912160 (@loudly-soft, Christian Folini)
326328
327329
328- == Version 3.0.0 - 11/10/2016 ==
330+ == Version 3.0.0 - 2016-11-10 ==
329331
330332Huge changeset running in separate branch from September 2013 to September 2016.
331333This is a cursory summary of the most important changes:
@@ -398,9 +400,7 @@ This is a cursory summary of the most important changes:
398400 * Many improvements to rules in 2014/5 (Ryan Barnett)
399401
400402
401- == Version 2.2.9 - 09/30/2013 ==
402-
403- Security Fixes:
403+ == Version 2.2.9 - 2013-09-30 ==
404404
405405Improvements:
406406* Updated the /util directory structure
@@ -412,9 +412,7 @@ Bug Fixes:
412412 https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/157
413413
414414
415- == Version 2.2.8 - 06/30/2013 ==
416-
417- Security Fixes:
415+ == Version 2.2.8 - 2013-06-30 ==
418416
419417Improvements:
420418* Updatd the /util directory structure
@@ -443,9 +441,7 @@ Bug Fixes:
443441 - https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/18
444442
445443
446- == Version 2.2.7 - 12/19/2012 ==
447-
448- Security Fixes:
444+ == Version 2.2.7 - 2012-12-19 ==
449445
450446Improvements:
451447* Added JS Overrides file to identify successfull XSS probes
@@ -460,9 +456,7 @@ Bug Fixes:
460456* Fixed bug in XSS rules checking TX:PM_XSS_SCORE variable
461457
462458
463- == Version 2.2.6 - 09/14/2012 ==
464-
465- Security Fixes:
459+ == Version 2.2.6 - 2012-09-14 ==
466460
467461Improvements:
468462* Started rule formatting update for better readability
@@ -483,7 +477,7 @@ Bug Fixes:
483477 https://www.modsecurity.org/tracker/browse/CORERULES-78
484478
485479
486- == Version 2.2.5 - 06/14/2012 ==
480+ == Version 2.2.5 - 2012-06-14 ==
487481
488482Security Fixes:
489483* Updated the anomaly scoring value for rule ID 960000 to critical
@@ -507,7 +501,7 @@ Bug Fixes:
507501* Added forceRequestBodyVariable action to rule ID 960904
508502
509503
510- == Version 2.2.4 - 03/14/2012 ==
504+ == Version 2.2.4 - 2012-03-14 ==
511505
512506Improvements:
513507* Added Location and Set-Cookie checks to Response Splitting rule ID 950910
@@ -523,7 +517,7 @@ Bug Fixes:
523517* Fixed duplidate rule IDs
524518
525519
526- == Version 2.2.3 - 12/19/2011 ==
520+ == Version 2.2.3 - 2011-12-19 ==
527521
528522Improvements:
529523* Added Watcher Cookie Checks to optional_rules/modsecurity_crs_55_appication_defects.conf file
@@ -539,7 +533,7 @@ Bug Fixes:
539533* Updated the regex and added tags for RFI rules.
540534
541535
542- == Version 2.2.2 - 09/28/2011 ==
536+ == Version 2.2.2 - 2011-09-28 ==
543537
544538
545539Improvements:
@@ -558,7 +552,7 @@ Bug Fixes:
558552* Updated the SQLi regex for rule ID 981242
559553
560554
561- == Version 2.2.1 - 07/20/2011 ==
555+ == Version 2.2.1 - 2011-07-20 ==
562556
563557
564558Improvements:
@@ -579,7 +573,7 @@ Bug Fixes:
579573* Updated rule ID 971150 signature to remove ;
580574
581575
582- == Version 2.2.0 - 05/26/2011 ==
576+ == Version 2.2.0 - 2011-05-26 ==
583577
584578
585579Improvements:
@@ -629,7 +623,7 @@ Bug Fixes:
629623 They will now inherit the settings from the SecDefaultAction
630624
631625
632- == Version 2.1.2 - 02/17/2011 ==
626+ == Version 2.1.2 - 2011-02-17 ==
633627
634628
635629Improvements:
@@ -643,7 +637,7 @@ Bug Fixes:
643637* Added missing " in the skipAfter SecAction in the CC Detection rule set
644638
645639
646- == Version 2.1.1 - 12/30/2010 ==
640+ == Version 2.1.1 - 2010-12-30 ==
647641
648642
649643Bug Fixes:
@@ -656,7 +650,7 @@ Bug Fixes:
656650* Moved the comment spam data file into the optional_rules directory
657651
658652
659- == Version 2.1.0 - 12/29/2010 ==
653+ == Version 2.1.0 - 2010-12-29 ==
660654
661655
662656Improvements:
@@ -687,7 +681,7 @@ Improvements:
687681
688682
689683
690- == Version 2.0.10 - 11/29/2010 ==
684+ == Version 2.0.10 - 2010-11-29 ==
691685
692686
693687Improvements:
@@ -701,7 +695,7 @@ Bug Fixes:
701695
702696
703697
704- == Version 2.0.9 - 11/17/2010 ==
698+ == Version 2.0.9 - 2010-11-17 ==
705699
706700
707701Improvements:
@@ -736,7 +730,7 @@ Bug Fixes:
736730 https://www.modsecurity.org/tracker/browse/CORERULES-62
737731
738732
739- == Version 2.0.8 - 08/27/2010 ==
733+ == Version 2.0.8 - 2010-08-27 ==
740734
741735
742736Improvements:
@@ -759,7 +753,7 @@ Bug Fixes:
759753 https://www.modsecurity.org/tracker/browse/CORERULES-29
760754
761755
762- == Version 2.0.7 - 06/4/ 2010 ==
756+ == Version 2.0.7 - 2010-06-04 ==
763757
764758
765759Improvements:
@@ -786,7 +780,7 @@ Bug Fixes:
786780* Fixed restricted_extension false positive by adding boundary characters
787781
788782
789- == Version 2.0.6 - 02/26/2010 ==
783+ == Version 2.0.6 - 2010-02-26 ==
790784
791785
792786Bug Fixes:
@@ -805,7 +799,7 @@ Bug Fixes:
805799* Update phpids filters to use pass action instead of block
806800
807801
808- == Version 2.0.5 - 02/01/2010 ==
802+ == Version 2.0.5 - 2010-02-01 ==
809803
810804
811805Improvements:
@@ -845,7 +839,7 @@ Bug Fixes:
845839 and blocking
846840
847841
848- == Version 2.0.4 - 11/30/2009 ==
842+ == Version 2.0.4 - 2009-11-30 ==
849843
850844
851845Improvements:
@@ -862,7 +856,7 @@ Bug Fixes:
862856 phase:4 which would allow for blocking based on information leakage issues.
863857
864858
865- == Version 2.0.3 - 11/05/2009 ==
859+ == Version 2.0.3 - 2009-11-05 ==
866860
867861
868862Improvements:
@@ -886,7 +880,7 @@ Bug Fixes:
886880 https://www.modsecurity.org/tracker/browse/CORERULES-23
887881
888882
889- == Version 2.0.2 - 09/11/2009 ==
883+ == Version 2.0.2 - 2009-09-11 ==
890884
891885
892886Improvements:
@@ -898,7 +892,7 @@ Bug Fixes:
898892 https://www.modsecurity.org/tracker/browse/CORERULES-15
899893
900894
901- == Version 2.0.1 - 08/07/2009 ==
895+ == Version 2.0.1 - 2009-08-07 ==
902896
903897
904898Improvements:
@@ -916,7 +910,7 @@ Bug Fixes:
916910 https://www.modsecurity.org/tracker/browse/CORERULES-9
917911
918912
919- == Version 2.0.0 - 07/29/2009 ==
913+ == Version 2.0.0 - 2009-07-29 ==
920914
921915
922916New Rules & Features:
@@ -1014,15 +1008,15 @@ Other Fixes:
10141008 rules and chained rules).
10151009
10161010
1017- == Version 1.6.1 - 2008/04/ 22 ==
1011+ == Version 1.6.1 - 2008-04- 22 ==
10181012
10191013
10201014* Fixed a bug where phases and transformations where not specified explicitly
10211015 in rules. The issue affected a significant number of rules, and we strongly
10221016 recommend to upgrade.
10231017
10241018
1025- == Version 1.6.0 - 2008/02/ 19 ==
1019+ == Version 1.6.0 - 2008-02- 19 ==
10261020
10271021
10281022New Rulesets & Features:
@@ -1060,7 +1054,7 @@ Additional rules logic:
10601054
10611055
10621056
1063- == Version 1.5.1 - 2007/12/6 ==
1057+ == Version 1.5.1 - 2007-12-06 ==
10641058
10651059
10661060False Positives Fixes:
@@ -1077,7 +1071,7 @@ Other Fixes:
10771071* File 55 contained empty regular expressions. Fixed.
10781072
10791073
1080- == Version 1.5 - 2007/11/ 23 ==
1074+ == Version 1.5 - 2007-11- 23 ==
10811075
10821076
10831077New Rulesets:
@@ -1116,7 +1110,7 @@ False Positives Fixes:
11161110 then you should uncomment this rule (in file 20)
11171111
11181112
1119- version 1.4.3 - 2007/07/ 21
1113+ version 1.4.3 - 2007-07- 21
11201114
11211115
11221116New Events:
@@ -1143,7 +1137,7 @@ Additional rules logic:
11431137
11441138
11451139
1146- version 1.4 build 2 - 2007/05/ 17
1140+ version 1.4 build 2 - 2007-05- 17
11471141
11481142
11491143New Feature:
@@ -1171,7 +1165,7 @@ FP fixes:
11711165* Rule 950107 - Will allow a parameter to end in a % sign from now on
11721166
11731167
1174- version 1.4 - 2007/05/ 02
1168+ version 1.4 - 2007-05- 02
11751169
11761170
11771171New Events:
@@ -1205,21 +1199,21 @@ Additional rules logic:
12051199* Added 1=1 signature (SQL Injection)
12061200
12071201
1208- version 1.3.2 build 4 2007/01/ 17
1202+ version 1.3.2 build 4 2007-01- 17
12091203
12101204
12111205Fixed apache 2.4 dummy requests exclusion
12121206Added persistent PDF UXSS detection rule
12131207
12141208
1215- == Version 1.3.2 build 3 2007/01/ 10 ==
1209+ == Version 1.3.2 build 3 2007-01- 10 ==
12161210
12171211
12181212Fixed regular expression in rule 960010 (file #30) to allow multipart form data
12191213content
12201214
12211215
1222- == Version 1.3.2 - 2006/12/ 27 ==
1216+ == Version 1.3.2 - 2006-12- 27 ==
12231217
12241218
12251219New events:
@@ -1255,7 +1249,7 @@ Modified descriptions:
12551249* Added ctl:auditLogParts=+E for outbound events and attacks to collect response.
12561250
12571251
1258- == Version 1.2 - 2006/11/ 19 ==
1252+ == Version 1.2 - 2006-11- 19 ==
12591253
12601254
12611255Changes:
@@ -1271,7 +1265,7 @@ SecResponseBodyMimeType)
12711265+ Too many FPs with events 950903 & 950905. Commented them out until fixed.
12721266
12731267
1274- == Version 1.1 - 2006/10/ 18 ==
1268+ == Version 1.1 - 2006-10- 18 ==
12751269
12761270
12771271Initial version
0 commit comments