RCE Bypass #4112
Description
Description
Payload:
\id
\``command`
How to reproduce the misbehavior (-> curl call)
curl -H "x-format-output: txt-matched-rules" "https://sandbox.coreruleset.org/?test=%5Cid" -H "x-crs-version: nightly" -H "x-crs-paranoia-level: 4"
curl -H "x-format-output: txt-matched-rules" "https://sandbox.coreruleset.org/?test=%5C%60%60command%60" -H "x-crs-version: nightly"