Forum Discussion

THE_BLUE's avatar
THE_BLUE
Icon for Cirrostratus rankCirrostratus
Sep 03, 2020

Header Based content profile

If i have form with Content-Type: multipart/form-data; boundary ................ that require file upload , when any file attached it is give attack signature detect. i have tried to add some ch...
ASM Advanced WAF
devops
security
Lidev's avatar
Lidev
Icon for MVP rankMVP
Sep 03, 2020

Hello Blue,

 

Yes there's a risk, it's not recommended not to check the body on request with multipart .

Did you try to set the parameter called during this request in Data type : File upload as in the screenshot below ?

Regards

  • THE_BLUE's avatar
    THE_BLUE
    Icon for Cirrostratus rankCirrostratus
    Sep 07, 2020

    Hello Lidev,

    Yes I did , but the issue still there.

    Does ASM inspect the file (pdf,jpg and so on ) ? or what exactly ?