Skip to content

Commit 2bf514f

Browse files
committed
tweak
1 parent 737ef57 commit 2bf514f

File tree

1 file changed

+27
-28
lines changed

1 file changed

+27
-28
lines changed

src/content/changelog/waf/2025-10-13-waf-release.mdx

Lines changed: 27 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -10,36 +10,35 @@ This week’s highlights include a new JinJava rule targeting a sandbox-bypass f
1010

1111
**Key Findings**
1212

13-
New WAF rule deployed for JinJava (CVE-2025-59340) to block a sandbox bypass in the template engine that permits attacker-controlled type construction and arbitrary class instantiation; in vulnerable environments this can escalate to remote code execution and full server compromise.
13+
New WAF rule deployed for JinJava (CVE-2025-59340) to block a sandbox bypass in the template engine that permits attacker-controlled type construction and arbitrary class instantiation; in vulnerable environments this can escalate to remote code execution and full server compromise.
1414

1515
**Impact**
1616

17-
* CVE-2025-59340 — Exploitation enables attacker-supplied type descriptors / Jackson `ObjectMapper` abuse, allowing arbitrary class loading, file/URL access (LFI/SSRF primitives) and, with suitable gadget chains, potential remote code execution and system compromise.
17+
- CVE-2025-59340 — Exploitation enables attacker-supplied type descriptors / Jackson `ObjectMapper` abuse, allowing arbitrary class loading, file/URL access (LFI/SSRF primitives) and, with suitable gadget chains, potential remote code execution and system compromise.
1818

1919
<table style="width: 100%">
20-
<thead>
21-
<tr>
22-
<th>Ruleset</th>
23-
<th>Rule ID</th>
24-
<th>Legacy Rule ID</th>
25-
<th>Description</th>
26-
<th>Previous Action</th>
27-
<th>New Action</th>
28-
<th>Comments</th>
29-
</tr>
30-
</thead>
31-
<tbody>
32-
<tr>
33-
<td>SSTI</td>
34-
<td>Cloudflare Managed Ruleset</td>
35-
<td>
36-
<RuleID id="b327d6442e2d4848b4aab3cbc04bab5f" />
37-
</td>
38-
<td>100892</td>
39-
<td>JinJava - SSTI - CVE:CVE-2025-59340</td>
40-
<td>Log</td>
41-
<td>Block</td>
42-
<td>This is a New Detection</td>
43-
</tr>
44-
</tbody>
45-
</table>
20+
<thead>
21+
<tr>
22+
<th>Ruleset</th>
23+
<th>Rule ID</th>
24+
<th>Legacy Rule ID</th>
25+
<th>Description</th>
26+
<th>Previous Action</th>
27+
<th>New Action</th>
28+
<th>Comments</th>
29+
</tr>
30+
</thead>
31+
<tbody>
32+
<tr>
33+
<td>Cloudflare Managed Ruleset</td>
34+
<td>
35+
<RuleID id="b327d6442e2d4848b4aab3cbc04bab5f" />
36+
</td>
37+
<td>100892</td>
38+
<td>JinJava - SSTI - CVE:CVE-2025-59340</td>
39+
<td>Log</td>
40+
<td>Block</td>
41+
<td>This is a New Detection</td>
42+
</tr>
43+
</tbody>
44+
</table>

0 commit comments

Comments
 (0)