You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/waf/detections/attack-score.mdx
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ sidebar:
6
6
label: Attack score
7
7
---
8
8
9
-
import { GlossaryTooltip } from"~/components";
9
+
import { GlossaryTooltip, Type } from"~/components";
10
10
11
11
The attack score [traffic detection](/waf/concepts/#detection-versus-mitigation) helps identify variations of known attacks and their malicious payloads. This detection complements [WAF Managed Rules](/waf/managed-rules/).
12
12
@@ -24,13 +24,13 @@ This feature is available to Enterprise customers. Business plans have access to
24
24
25
25
The Cloudflare WAF provides the following attack score fields:
26
26
27
-
|Score | Data type | Minimum plan required | Attack vector| Field|
| WAF Attack Score |[`cf.waf.score`](/ruleset-engine/rules-language/fields/reference/cf.waf.score/) <br/> <Typetext="Number" /> |Enterprise | A global score from 1–99 that combines the score of each WAF attack vector into a single score.|
30
+
| WAF SQLi Attack Score |[`cf.waf.score.sqli`](/ruleset-engine/rules-language/fields/reference/cf.waf.score.sqli/) <br/> <Typetext="Number" />| Enterprise | A score from 1–99 classifying the [SQL injection][1] (SQLi) attack vector.|
31
+
| WAF XSS Attack Score |[`cf.waf.score.xss`](/ruleset-engine/rules-language/fields/reference/cf.waf.score.xss/) <br/> <Typetext="Number" />| Enterprise | A score from 1–99 classifying the [cross-site scripting][2] (XSS) attack vector. |
32
+
| WAF RCE Attack Score |[`cf.waf.score.rce`](/ruleset-engine/rules-language/fields/reference/cf.waf.score.rce/)<br/> <Typetext="Number" /> | Enterprise | A score from 1–99 classifying the command injection or [remote code execution][3] (RCE) attack vector.|
33
+
| WAF Attack Score Class |[`cf.waf.score.class`](/ruleset-engine/rules-language/fields/reference/cf.waf.score.class/) <br/> <Typetext="String" /> | Business or above | The attack score class of the current request, based on the WAF attack score. |
0 commit comments