# Problem with Upload document

**URL:** <https://forums.pega.com/t/problem-with-upload-document/7327>\
**Category:** General\
**Tags:** java-and-activities, financial-services, 8-8-1, security\
**Created:** [June 11, 2024, 9:09pm UTC](https://forums.pega.com/t/problem-with-upload-document/7327 "2024-06-11T21:09:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![BrahmeshTech](https://avatars.discourse-cdn.com/v4/letter/b/13edae/32.png) [@BrahmeshTech](https://forums.pega.com/u/BrahmeshTech)\
**Post date:** [June 11, 2024, 9:09pm UTC](https://forums.pega.com/t/problem-with-upload-document/7327/1 "2024-06-11T21:09:12Z")

</div>

We are having an issue with file upload in pega portal as it’s giving 403 error .

one of the server is configured with **opswat metadefender api** for sanitizing the documents that are being uploaded by customer in Pega ,Recently Opswat was upgraded to latest version, after upgrade we are not able to upload the documents as pega is getting the 403 error from server and we see the document was uploaded into ServiceExportDirectory but not able to read the document from the folder and invoke the pyuploadfile activity to form dragDropFileUpload page list. we use OOTB control **pzMultiFilePath** for uploading the documents.

We tried to disable the security check as well by making the pyBlockUnregisteredRequests when rule as false but still problem is persist .

T **he log from browser console :**

 ![Capture.jpg](https://pega1.discourse-cdn.com/pega/original/2X/3/3f14b35d85883d3cc61707e064fb1718cce89052.jpeg)

**Request URL:**  
[https://appl.test.se/prweb/Applicant/app/LOA\_/riPdw8Xf\_Q2LR7tthACBpA\*/!TABTHREAD0?pyActivity=pzRunActionWrapper&pzTransactionId=57204ce1a79fd12a8b7be3817e10e0c2&pzFromFrame=pyWorkPage&pzPrimaryPageName=pyWorkPage&AttachFieldReadOnly=&AttachFieldRequired=&Category=File&UITemplatingStatus=N&inStandardsMode=true&AJAXTrackID=1&pzHarnessID=HID83AEC5666D65D03046684F0AC4CC150F&pzActivity=pzDragDropMultiFileUpload&skipReturnResponse=true&pySubAction=runAct](https://appl.test.se/prweb/Applicant/app/LOA_/riPdw8Xf_Q2LR7tthACBpA*/!TABTHREAD0?pyActivity=pzRunActionWrapper&pzTransactionId=57204ce1a79fd12a8b7be3817e10e0c2&pzFromFrame=pyWorkPage&pzPrimaryPageName=pyWorkPage&AttachFieldReadOnly=&AttachFieldRequired=&Category=File&UITemplatingStatus=N&inStandardsMode=true&AJAXTrackID=1&pzHarnessID=HID83AEC5666D65D03046684F0AC4CC150F&pzActivity=pzDragDropMultiFileUpload&skipReturnResponse=true&pySubAction=runAct)  
Request Method:  
POST  
**Status Code:**  
**403 Forbidden**

Referrer Policy:  
strict-origin-when-cross-origin

**Pega Rules Log** :-At the same time we see the following exception in pega logs related to CSRF token.

2024-06-11 22:37:08,508 [.37.95.71-443-exec-5] [TABTHREAD0] ( mgmt.util.CSRFUtil) ERROR appl.test.se|XX.XX.XX.X HOPKWJ9FF70BTOA3VAOITHTR7Q9NG9SJOA - CSRF Mitigation - Empty CSRF token in the request made by the thread with name TABTHREAD0.

Any lead how to proceed further to identify the issue .

---

<div class="post-metadata">

**Author:** ![MarijeSchillern](https://yyz2.discourse-cdn.com/pega/user_avatar/forums.pega.com/marijeschillern/32/23321_2.png) [@MarijeSchillern](https://forums.pega.com/u/MarijeSchillern)\
**Post date:** [June 26, 2024, 10:57am UTC](https://forums.pega.com/t/problem-with-upload-document/7327/2 "2024-06-26T10:57:28Z")

</div>

@Brahmesh@ I can see that you logged support ticket INC-B24045 (Problem with Upload documents in Pega)

You informed the support team that you found the cause as you found the issue: it was “…_being caused with latest version of OPSWAT MetaDefender in your system_”.

I will therefore close this PSC post with the same conclusion.