<!--- For help and support please go to Stack Exchange: -->
<!--- https://security.stackexchange.com/questions/tagged/owasp-crs -->

<!--- Provide a general summary of the issue in the Title above -->

## Type of Issue
<!-- Incorrect blocking (false positive), incorrect bypass (false negative), -->
<!-- bug fix, feature suggestion -->

## Description
<!-- In case of a false positive, please provide a copy of the audit -->
<!-- log entry. You can usually find this at /var/log/modsec_audit.log. -->
<!-- In case of a false negative, please provide the payload you -->
<!-- are sending. For complex payloads with headers, please include -->
<!-- a curl command. -->
<!-- Include any relevant CVEs or research links. -->

## Your Environment
<!--- Include as many relevant details about the environment you -->
<!--- experienced the bug in: -->
* CRS version (e.g. v3.0.2):
* ModSecurity version (e.g. 2.9.2):
* Web Server and version (e.g. apache 2.4.27):
* Operating System and version:

## Confirmation

[ ] I have removed any personal data (email addresses, IP addresses,
    passwords, domain names) from any logs posted.
