I set up an env to test this rule on apache and litespeed.
initially work on apache but not on litespeed.
now it works on latest 4.2.2 build as well.
Thanks for giving the specific rule, so we can investigate it effectively. to catch up with the upstream of mod_security as short as possible, detailed and specific rules are needed.