CVE-2024-3273.yaml rule matching problem

[soevai]

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "<auth_state>1</auth_state>"

      - type: regex
        part: body
        regex:
          - "uid=([0-9(a-z)]+) gid=([0-9(a-z)]+)"

Some pages has the vulnerability, but on the front end does not return the uid = 0 (root) gid = 0 (root), result in unable to match multiple with the vulnerability of site, compared with https://github.com/Chocapikk/CVE-2024-3273 come to the conclusion.