Changelog ยท WAFhttps://developers.cloudflare.com/waf/change-log/Updates to Cloudflare's WAF product.en-usTuesday, Nov 21, 20232023-11-21https://developers.cloudflare.com/waf/change-log/2023-11-21/ <table style="width: 100%"> <thead> <tr> <th>Ruleset</th> <th>Rule ID</th> <th>Legacy Rule ID</th> <th>Description</th> <th>Previous Action</th> <th>New Action</th> <th>Comments</th> </tr> </thead> <tbody> <tr> <td>Cloudflare Specials</td> <td>...8ed2b1d9</td> <td>100611</td> <td>WordPress:Plugin:WooCommerce - Unauthorized Administrator Access - CVE:CVE-2023-28121</td> <td>N/A</td> <td>Block</td> <td>N/A</td> </tr> <tr> <td>Cloudflare Specials</td> <td>...c3b6a372</td> <td>100593</td> <td>Adobe ColdFusion - Auth Bypass, Remote Code Execution - CVE:CVE-2023-29298, CVE:CVE-2023-38203, CVE:CVE-2023-26360</td> <td>N/A</td> <td>Block</td> <td>N/A</td> </tr> </tbody> </table>Tuesday, Nov 21, 20232023-11-06 - Emergencyhttps://developers.cloudflare.com/waf/change-log/2023-11-06---emergency-release/ <table style="width: 100%"> <thead> <tr> <th>Ruleset</th> <th>Rule ID</th> <th>Legacy Rule ID</th> <th>Description</th> <th>Previous Action</th> <th>New Action</th> <th>Comments</th> </tr> </thead> <tbody> <tr> <td>Cloudflare Specials</td> <td>...c54e7046</td> <td>100614</td> <td>Atlassian Confluence - Code Injection - CVE:CVE-2023-22518</td> <td>N/A</td> <td>Block</td> <td>N/A</td> </tr> </tbody> </table>Monday, Nov 6, 2023Scheduled changeshttps://developers.cloudflare.com/waf/change-log/scheduled-changes/ <table style="width: 100%"> <thead> <tr> <th>Announcement Date</th> <th>Release Date</th> <th>Release Behavior</th> <th>Legacy Rule ID</th> <th>Rule ID</th> <th>Description</th> <th>Comments</th> </tr> </thead> <tbody> <tr> <td>N/A</td> <td>N/A</td> <td>N/A</td> <td>N/A</td> <td>N/A</td> <td>N/A</td> <td>No updates scheduled</td> </tr> </tbody> </table>Monday, Oct 30, 20232023-10-30https://developers.cloudflare.com/waf/change-log/2023-10-30/ <table style="width: 100%"> <thead> <tr> <th>Ruleset</th> <th>Rule ID</th> <th>Legacy Rule ID</th> <th>Description</th> <th>Previous Action</th> <th>New Action</th> <th>Comments</th> </tr> </thead> <tbody> <tr> <td>Cloudflare Specials</td> <td>...d59a59db</td> <td>100609</td> <td>Keycloak - SSRF - CVE:CVE-2020-10770</td> <td>N/A</td> <td>Block</td> <td>N/A</td> </tr> </tbody> </table>Monday, Oct 30, 20232023-10-23https://developers.cloudflare.com/waf/change-log/2023-10-23/ <table style="width: 100%"> <thead> <tr> <th>Ruleset</th> <th>Rule ID</th> <th>Legacy Rule ID</th> <th>Description</th> <th>Previous Action</th> <th>New Action</th> <th>Comments</th> </tr> </thead> <tbody> <tr> <td>Cloudflare Specials</td> <td>...3e3f706d</td> <td>100606</td> <td>JetBrains TeamCity - Auth Bypass, Remote Code Execution - CVE:CVE-2023-42793</td> <td>N/A</td> <td>Block</td> <td>N/A</td> </tr> <tr> <td>Cloudflare Specials</td> <td>...469c4a38</td> <td>100607</td> <td>Progress WS_FTP - Information Disclosure - CVE:CVE-2023-40044</td> <td>N/A</td> <td>Block</td> <td>N/A</td> </tr> <tr> <td>Cloudflare Specials</td> <td>...7ccccdce</td> <td>100608</td> <td>Progress WS_FTP - Remote Code Execution - CVE:CVE-2023-40044</td> <td>N/A</td> <td>Block</td> <td>N/A</td> </tr> </tbody> </table>Monday, Oct 23, 20232023-10-11 - Emergencyhttps://developers.cloudflare.com/waf/change-log/2023-10-11---emergency-release/ <table style="width: 100%"> <thead> <tr> <th>Ruleset</th> <th>Rule ID</th> <th>Legacy Rule ID</th> <th>Description</th> <th>Previous Action</th> <th>New Action</th> <th>Comments</th> </tr> </thead> <tbody> <tr> <td>Cloudflare Specials</td> <td>...ec9f34e1</td> <td>100604</td> <td>Atlassian Confluence - Privilege Escalation - CVE:CVE-2023-22515</td> <td>N/A</td> <td>Block</td> <td>This rule is released for our Cloudflare Free customers as well, rule ID: ...91935fcb (Detection logic update)</td> </tr> </tbody> </table>Wednesday, Oct 11, 20232023-10-04 - Emergencyhttps://developers.cloudflare.com/waf/change-log/2023-10-04---emergency-release/ <table style="width: 100%"> <thead> <tr> <th>Ruleset</th> <th>Rule ID</th> <th>Legacy Rule ID</th> <th>Description</th> <th>Previous Action</th> <th>New Action</th> <th>Comments</th> </tr> </thead> <tbody> <tr> <td>Cloudflare Specials</td> <td>...ec9f34e1</td> <td>100604,100605</td> <td>Atlassian Confluence - Privilege Escalation - CVE:CVE-2023-22515</td> <td>N/A</td> <td>Block</td> <td>This rule is released for our Cloudflare Free customers as well, rule ID: ...91935fcb</td> </tr> </tbody> </table>Tuesday, Oct 3, 20232023-10-02https://developers.cloudflare.com/waf/change-log/2023-10-02/ <table style="width: 100%"> <thead> <tr> <th>Ruleset</th> <th>Rule ID</th> <th>Legacy Rule ID</th> <th>Description</th> <th>Previous Action</th> <th>New Action</th> <th>Comments</th> </tr> </thead> <tbody> <tr> <td>Cloudflare Specials</td> <td>...34780914</td> <td>100532</td> <td>Vulnerability scanner activity</td> <td>N/A</td> <td>Block</td> <td>This rule was released as 100532_BETA in legacy waf and ...6e298ed7 in new WAF</td> </tr> </tbody> </table>Monday, Oct 2, 20232023-09-22 - Emergencyhttps://developers.cloudflare.com/waf/change-log/2023-09-22---emergency-release/ <table style="width: 100%"> <thead> <tr> <th>Ruleset</th> <th>Rule ID</th> <th>Legacy Rule ID</th> <th>Description</th> <th>Previous Action</th> <th>New Action</th> <th>Comments</th> </tr> </thead> <tbody> <tr> <td>Cloudflare Specials</td> <td>...066c0c9a</td> <td>100602</td> <td>Code Injection - CVE:CVE-2023-36845</td> <td>N/A</td> <td>Block</td> <td>N/A</td> </tr> <tr> <td>Cloudflare Specials</td> <td>...0746d000</td> <td>100603</td> <td>Information Disclosure - CVE:CVE-2023-28432</td> <td>N/A</td> <td>Block</td> <td>N/A</td> </tr> </tbody> </table>Friday, Sep 22, 20232023-09-18https://developers.cloudflare.com/waf/change-log/2023-09-18/ <table style="width: 100%"> <thead> <tr> <th>Ruleset</th> <th>Rule ID</th> <th>Legacy Rule ID</th> <th>Description</th> <th>Previous Action</th> <th>New Action</th> <th>Comments</th> </tr> </thead> <tbody> <tr> <td>Cloudflare Specials</td> <td>...25ba9d7c</td> <td>N/A</td> <td>SSRF Cloud</td> <td>N/A</td> <td>Disabled</td> <td>N/A</td> </tr> </tbody> </table>Monday, Sep 18, 20232023-09-04https://developers.cloudflare.com/waf/change-log/2023-09-04/ <table style="width: 100%"> <thead> <tr> <th>Ruleset</th> <th>Rule ID</th> <th>Legacy Rule ID</th> <th>Description</th> <th>Previous Action</th> <th>New Action</th> <th>Comments</th> </tr> </thead> <tbody> <tr> <td>Cloudflare Specials</td> <td>...c5f041ac</td> <td>100597</td> <td>Information Disclosure - Path Normalization</td> <td>Log</td> <td>Block</td> <td>N/A</td> </tr> <tr> <td>Cloudflare Specials</td> <td>...50cec478</td> <td>100598</td> <td>Remote Code Execution - Common Bash Bypass</td> <td>Log</td> <td>Block</td> <td>N/A</td> </tr> <tr> <td>Cloudflare Specials</td> <td>...ec5b0d04</td> <td>100599</td> <td>Ivanti - Auth Bypass - CVE:CVE-2023-38035</td> <td>Log</td> <td>Block</td> <td>N/A</td> </tr> <tr> <td>Cloudflare Specials</td> <td>...6912c055</td> <td>100601</td> <td>Malware - Polymorphic Encoder</td> <td>Log</td> <td>Block</td> <td>N/A</td> </tr> <tr> <td>Cloudflare Specials</td> <td>...8242627b</td> <td>100146B</td> <td>SSRF Local BETA</td> <td>Log</td> <td>Disabled</td> <td>N/A</td> </tr> </tbody> </table>Monday, Sep 4, 20232023-08-21https://developers.cloudflare.com/waf/change-log/2023-08-21/ <table style="width: 100%"> <thead> <tr> <th>Ruleset</th> <th>Rule ID</th> <th>Legacy Rule ID</th> <th>Description</th> <th>Previous Action</th> <th>New Action</th> <th>Comments</th> </tr> </thead> <tbody> <tr> <td>Cloudflare Specials</td> <td>...84dadf5a</td> <td>100595</td> <td>MobileIron - Auth Bypass - CVE:CVE-2023-35082</td> <td>Log</td> <td>Block</td> <td>N/A</td> </tr> <tr> <td>Cloudflare Specials</td> <td>...48a60154</td> <td>N/A</td> <td>SQLi - Keyword + SubExpress + Comment + BETA</td> <td>N/A</td> <td>Disabled</td> <td>N/A</td> </tr> </tbody> </table>Monday, Aug 21, 20232023-08-17 - Emergencyhttps://developers.cloudflare.com/waf/change-log/2023-08-17---emergency-release/ <table style="width: 100%"> <thead> <tr> <th>Ruleset</th> <th>Rule ID</th> <th>Legacy Rule ID</th> <th>Description</th> <th>Previous Action</th> <th>New Action</th> <th>Comments</th> </tr> </thead> <tbody> <tr> <td>Cloudflare Specials</td> <td>...cac42ce2</td> <td>100596</td> <td>Citrix Content Collaboration ShareFile - Remote Code Execution - CVE:CVE-2023-24489</td> <td>N/A</td> <td>Block</td> <td>N/A</td> </tr> </tbody> </table>Thursday, Aug 17, 2023