The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SOLVED OWASP CRS release date?

Discussion in 'Security' started by ItsMattSon, Jan 27, 2017.

Tags:
  1. ItsMattSon

    ItsMattSon Well-Known Member

    Joined:
    Sep 5, 2016
    Messages:
    125
    Likes Received:
    27
    Trophy Points:
    28
    Location:
    Perth
    cPanel Access Level:
    Root Administrator
    Hi guys,

    Quick question regarding this feature request - Update ModSecurity Vendor OWASP to OWASP ModSecurity Core Rule Set (CRS) 3

    It looks like it isn't released yet but my error_log suggests I'm running CRS3. Was it released already? Or am I mistaken?

    (partial copy/paste)

    [msg "Request Missing an Accept Header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "8"] [tag "Host: 127.0.0.1:80"]
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,174
    Likes Received:
    1,295
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    It looks like version 3.0.0 of the OWASP Mod_Security Core Rule Set is now available:

    Code:
    head -10 /etc/apache2/conf.d/modsec_vendor_configs/OWASP/modsecurity_crs_10_setup.conf
    # ---------------------------------------------------------------
    # Core ModSecurity Rule Set ver.3.0.0
    # Copyright (C) 2006-2014 Trustwave All rights reserved.
    #
    # The OWASP ModSecurity Core Rule Set is distributed under
    # Apache Software License (ASL) version 2
    # Please see the enclosed LICENCE file for full details.
    # ---------------------------------------------------------------
    I'll look into getting the status on the feature request page updated.

    Thank you.
     
    ItsMattSon likes this.
  3. ItsMattSon

    ItsMattSon Well-Known Member

    Joined:
    Sep 5, 2016
    Messages:
    125
    Likes Received:
    27
    Trophy Points:
    28
    Location:
    Perth
    cPanel Access Level:
    Root Administrator
    Thanks for the confirmation, cPanelMichael! Good to see we're on CRS3 now :D
     
    cPanelMichael likes this.
Loading...

Share This Page