Bypass OWASP CRS && CWAF [WAF Rule Testing - Unrestricted File Upload]

I have seen the following video on youtube explaining how to Bypass OWASP CRS && CWAF, interesting video. Just wondering if this is already patched?

Much appreciated thanks.


We have rules to block those attacks, provided user should enable it as needed. Enabling such rule may cause multiple FPs.