Changelog · WAF

2024-04-15

Mon, 15 Apr 2024 08:00:00 EST

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Specials	`...be099a1f`	100045C	Anomaly:URL:Path - Multiple Slashes, Relative Paths, CR, LF or NULL 2	N/A	Disabled	N/A
Cloudflare Specials	`...e31d972a`	100007C_BETA	Command Injection - Common Attack Commands Beta	N/A	Disabled	N/A
Cloudflare Specials	`...7f3009d1`	100643	Default Windows User - Directory Traversal	N/A	Disabled	N/A
Cloudflare Specials	`...cf419cda`	100088E	Generic XXE Attack	N/A	Disabled	N/A
Cloudflare Specials	`...56c53382`	100088D	Generic XXE Attack 2	N/A	Disabled	N/A
Cloudflare Specials	`...af00f61d`	100536A	GraphQL Introspection	N/A	Disabled	N/A
Cloudflare Specials	`...a41e5b67`	100536B	GraphQL SSRF	N/A	Disabled	N/A
Cloudflare Specials	`...48f6a9cf`	100642	LDAP Injection	N/A	Disabled	N/A
Cloudflare Specials	`...dd908124`	100532C	Vulnerability scanner activity 3	N/A	Disabled	N/A

Mon, 08 Apr 2024 08:00:00 EST

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Specials	...49621813	100632	Nginx - File Inclusion	N/A	Disabled	N/A
Cloudflare Specials	...7dc64fb6	100633	PHP - File Inclusion	N/A	Disabled	N/A
Cloudflare Specials	...7eac8439	100634	Generic Database - File Inclusion	N/A	Disabled	N/A
Cloudflare Specials	...a0ccf665	100635	Generic Log - File Inclusion	N/A	Disabled	N/A
Cloudflare Specials	...e485e537	100636	Generic Webservers - File Inclusion	N/A	Disabled	N/A
Cloudflare Specials	...1813c52d	100637	Generic Home Directory - File Inclusion	N/A	Disabled	N/A
Cloudflare Specials	...241fb0cb	100638	Generic System Process - File Inclusion	N/A	Disabled	N/A
Cloudflare Specials	...d03cd48f	100639	Command Injection	N/A	Disabled	N/A
Cloudflare Specials	...e367ad17	100640	Generic System - File Inclusion	N/A	Disabled	N/A
Cloudflare Specials	...a8f03d2d	100641	Apache - File Inclusion	N/A	Disabled	N/A

Tue, 02 Apr 2024 08:00:00 EST

Announcement Date	Release Date	Release Behavior	Legacy Rule ID	Rule ID	Description	Comments
N/A	N/A	N/A	N/A	N/A	N/A	N/A

Mon, 18 Mar 2024 08:00:00 EST

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Specials	...2bed8cdd	100629	JetBrains TeamCity - Auth Bypass, Remote Code Execution - CVE:CVE-2024-27198, CVE:CVE-2024-27199	N/A	Block	N/A
Cloudflare Specials	...1ef425a5	100630	Apache OFBiz - Auth Bypass, Remote Code Execution - CVE:CVE-2023-49070, CVE:CVE-2023-51467	N/A	Block	N/A

Mon, 11 Mar 2024 08:00:00 EST

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Specials	...dc6877e2	100627	Wordpress:Plugin:Bricks Builder Theme - Command Injection - CVE:CVE-2024-25600	N/A	Block	N/A
Cloudflare Specials	...ae685218	100628	ConnectWise - Auth Bypass	N/A	Block	N/A

Mon, 04 Mar 2024 08:00:00 EST

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Specials	...aa290ad9	100135D	XSS - JS On Events	N/A	Block	This detection was released as ...9c1c14e6 (BETA) in new WAF

Mon, 26 Feb 2024 08:00:00 EST

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Specials	...1d870399	100546	XSS - HTML Encoding	N/A	Block	This detection was released as ...07c62aeb (BETA) in new WAF

Tue, 20 Feb 2024 08:00:00 EST

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Specials	...9a5581d0	100622B, 100622C	Ivanti - Command Injection - CVE:CVE-2023-46805, CVE:CVE-2024-21887, CVE:CVE-2024-22024	N/A	Block	N/A
Cloudflare Specials	...d0b325aa	N/A	Microsoft ASP.NET - Code Injection - Function response.write	N/A	Block	This detection was released as ...50c86f85 (BETA) in new WAF
Cloudflare Specials	...1b138b3e	N/A	NoSQL, MongoDB - SQLi - Comparison	N/A	Block	This detection was released as ...4ba436bb (BETA) in new WAF
Cloudflare Specials	...8f66903c	N/A	NoSQL, MongoDB - SQLi - Expression	N/A	Block	This detection was released as ...f67956b2 (BETA) in new WAF
Cloudflare Specials	...2d2e031c	N/A	PHP - Code Injection	N/A	Disabled	This detection was released as ...2a1f3a04 (BETA) in new WAF
Cloudflare Specials	...824b817c	N/A	PHP, vBulletin, jQuery File Upload - Code Injection, Dangerous File Upload - CVE:CVE-2018-9206, CVE:CVE-2019-17132	N/A	Block	This detection was released as ...dcd12482 (BETA) in new WAF

Mon, 12 Feb 2024 08:00:00 EST

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Specials	...901523c0	100625	Jenkins - Information Disclosure - CVE:CVE-2024-23897	N/A	Block	N/A
Cloudflare Specials	...d5e015dd	100514	Log4j Headers	N/A	Block	N/A
Cloudflare Specials	...dc29b753	100515B	Log4j Body Obfuscation	N/A	Block	N/A

Mon, 05 Feb 2024 08:00:00 EST

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Specials	...52d6027b	100624	GoAnywhere - Auth Bypass - CVE:CVE-2024-0204	N/A	Block	N/A
Cloudflare Specials	...f89ab164	100626,100626A	Anomaly:Header:Content-Type - Multiple	N/A	Disabled	New Detection
Cloudflare Specials	...7736c63c	N/A	AngularJS - XSS	N/A	Block	This detection was released as ...014fc5b9 (BETA) in new WAF
Cloudflare Specials	...a02344cb	N/A	Apache HTTP Server - Server-Side Includes	N/A	Disabled	This detection was released as ...10cae4a8 (BETA) in new WAF
Cloudflare Specials	...af52d528	N/A	Command Injection - CVE:CVE-2014-6271	N/A	Block	This detection was released as ...d2a0991c (BETA) in new WAF
Cloudflare Specials	...b090ba9a	N/A	Command Injection - Nslookup	N/A	Block	This detection was released as ...da3d944c (BETA) in new WAF
Cloudflare Specials	...d5a14a5e	N/A	Microsoft ASP.NET - Code Injection	N/A	Disabled	This detection was released as ...70f4f073 (BETA) in new WAF

Mon, 22 Jan 2024 08:00:00 EST

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Specials	...da07a922	100623	Atlassian Confluence - Template Injection - CVE:CVE-2023-22527	N/A	Block	N/A

Wed, 17 Jan 2024 08:00:00 EST

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Specials	...34ab53c5	100622	Ivanti - Auth Bypass, Command Injection - CVE:CVE-2023-46805, CVE:CVE-2024-21887	N/A	Block	N/A

Tue, 16 Jan 2024 08:00:00 EST

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Specials	...38906cff	100620	Microsoft ASP.NET - Remote Code Execution - CVE:CVE-2023-35813	N/A	Block	N/A
Cloudflare Specials	...84f664a9	100619	Liferay - Remote Code Execution - CVE:CVE-2020-7961	N/A	Block	N/A
Cloudflare Specials	...7d29ec39	100618	pfSense - Remote Code Execution - CVE:CVE-2023-42326	N/A	Block	N/A
Cloudflare Specials	...9016ef33	100621	Clerk - Auth Bypass	N/A	Disabled	N/A

Thu, 04 Jan 2024 08:00:00 EST

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Specials	`...53c7ccde`	100612	SnakeYAML - CVE:CVE-2022-1471	N/A	Block	N/A