PATH_INFO not work

[xu-xiang]

Description

PATH_INFO not work

Steps to reproduce

test http

POST /service_transport/service.action?a=1 HTTP/1.1
Accept-Encoding: gzip
Connection: close
Content-Length: 180
Content-Type: application/json
Host: 220.202.55.211:8090
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36

{"command":"GetFZinfo","UnitCode":"<#assign ex = \"freemarker.template.utility.Execute\"?new()>${ex(\"cmd /c echo xosreokymgnfjqkhtnjvbcqmaweeeupu > ./webapps/ROOT/nvjcbw.txt\")}"}

success rule

SecRule REQUEST_FILENAME "@contains /service_transport/service.action"  "id:948008,msg:'test',phase:2,block,capture,severity:'CRITICAL',tag:'attack-rce',tag:'paranoia-level/1',t:none"

failed rule

SecRule PATH_INFO "@contains /service_transport/service.action"  "id:948008,msg:'test',phase:2,block,capture,severity:'CRITICAL',tag:'attack-rce',tag:'paranoia-level/1',t:none"

test whth https://playground.coraza.io/#

Expected result

What should happen?

Actual result

What happened.