Issue modsecurity error

[JMaartenW]

Server operating system version

Debian 11.11

Plesk version and microupdate number

Plesk Obsidian 18.0.79 Update #7

I keep getting this error in my modescurity log, any help appreciated.

Message: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||%limnudomain%|F|2"] [data "/wp-json/batch/v1"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"]

 

[Sebahat.hadzhi]

Is there actually an issue you are experiencing - like a legitime request being blocked as false positive or is the log entry the only point of concern?

If a legitimate request is being blocked by ModSecurity, you can exclude the 217200 rule by following these instructions:

• https://support.plesk.com/hc/en-us/...plication-Firewall-ModSecurity-rules-in-Plesk