Steps to reproduce the issue

have apache mod_security 2.9.5 installed
on J4.x /administrator/index.php?option=com_media&path=local-images

Expected result

to see media listing

Actual result

ModSecurity: Access denied with code 400 (phase 2). Match of "eq 0" against "REQBODY_ERROR" required. [file "/etc/modsecurity/modsecurity.conf"] [line "71"] [id "200002"] [msg "Failed to parse request body."] [data "JSON parser error: parse error: premature EOF\x0a"] [severity "CRITICAL"] [hostname "xxxxxxxx"] [uri "/administrator/index.php"] [unique_id "YgPV97WMmN7SW1mSXvPM0QAAVgU"], referer: https://xxxxxxx/administrator/index.php?option=com_media&path=local-images

System information (as much as possible)

PHP 7.4.27
j4.0.6
mod_security 2.9.5

Additional comments

https://stackoverflow.com/questions/38257534/mod-security-a-rule-to-allow-post-requests-without-a-request-body