Skip to content

Commit 879eb5f

Browse files
fb1337fb1337
authored
WAF Release 10 November (#26414)
* WAF Release 10 November * id update
1 parent e7a5020 commit 879eb5f

File tree

2 files changed

+93
-60
lines changed

2 files changed

+93
-60
lines changed

‎src/content/changelog/waf/2025-11-10-waf-release.mdx‎

Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
---
2+
title: "WAF Release - 2025-11-10"
3+
description: Cloudflare WAF managed rulesets 2025-11-10 release
4+
date: 2025-11-10
5+
---
6+
7+
import { RuleID } from "~/components";
8+
9+
This week’s release introduces new detections for Prototype Pollution across three common vectors: URI, Body, and Header/Form.
10+
11+
**Key Findings**
12+
13+
- These attacks can affect both API and web applications by altering normal behavior or bypassing security controls.
14+
15+
**Impact**
16+
17+
Exploitation may allow attackers to change internal logic or cause unexpected behavior in applications using JavaScript or Node.js frameworks. Developers should sanitize input keys and avoid merging untrusted data structures.
18+
19+
<table style="width: 100%">
20+
<thead>
21+
<tr>
22+
<th>Ruleset</th>
23+
<th>Rule ID</th>
24+
<th>Legacy Rule ID</th>
25+
<th>Description</th>
26+
<th>Previous Action</th>
27+
<th>New Action</th>
28+
<th>Comments</th>
29+
</tr>
30+
</thead>
31+
<tbody>
32+
<tr>
33+
<td>Cloudflare Managed Ruleset</td>
34+
<td>
35+
<RuleID id="32405a50728746dd8caa057b606285e6" />
36+
</td>
37+
<td>N/A</td>
38+
<td>Generic Rules - Prototype Pollution - URI</td>
39+
<td>Log</td>
40+
<td>Disabled</td>
41+
<td>This is a new detection</td>
42+
</tr>
43+
<tr>
44+
<td>Cloudflare Managed Ruleset</td>
45+
<td>
46+
<RuleID id="a7da00c63c4243d2a72456fe4f59ff26" />
47+
</td>
48+
<td>N/A</td>
49+
<td>Generic Rules - Prototype Pollution - Body</td>
50+
<td>Log</td>
51+
<td>Disabled</td>
52+
<td>This is a new detection</td>
53+
</tr>
54+
<tr>
55+
<td>Cloudflare Managed Ruleset</td>
56+
<td>
57+
<RuleID id="833078bdcfa04bb7aa7b8fb67efbeb39" />
58+
</td>
59+
<td>N/A</td>
60+
<td>Generic Rules - Prototype Pollution - Header - Form</td>
61+
<td>Log</td>
62+
<td>Disabled</td>
63+
<td>This is a new detection</td>
64+
</tr>
65+
</tbody>
66+
</table>

‎src/content/changelog/waf/scheduled-waf-release.mdx‎

Lines changed: 27 additions & 60 deletions
Original file line numberDiff line numberDiff line change
@@ -1,68 +1,35 @@
11
---
2-
title: WAF Release - Scheduled changes for 2025-11-10
3-
description: WAF managed ruleset changes scheduled for 2025-11-10
4-
date: 2025-11-03
2+
title: WAF Release - Scheduled changes for 2025-11-17
3+
description: WAF managed ruleset changes scheduled for 2025-11-17
4+
date: 2025-11-10
55
scheduled: true
66
---
77

88
import { RuleID } from "~/components";
99

1010
<table style="width: 100%">
11-
<thead>
12-
<tr>
13-
<th>Announcement Date</th>
14-
<th>Release Date</th>
15-
<th>Release Behavior</th>
16-
<th>Legacy Rule ID</th>
17-
<th>Rule ID</th>
18-
<th>Description</th>
19-
<th>Comments</th>
20-
</tr>
21-
</thead>
22-
<tbody>
23-
<tr>
24-
<td>2025-10-27</td>
25-
<td>2025-11-10</td>
26-
<td>Log</td>
27-
<td>N/A</td>
28-
<td>
29-
<RuleID id="32405a50728746dd8caa057b606285e6" />
30-
</td>
31-
<td>Generic Rules - Prototype Pollution - URI</td>
32-
<td>This is a new detection</td>
33-
</tr>
34-
<tr>
35-
<td>2025-10-27</td>
36-
<td>2025-11-10</td>
37-
<td>Log</td>
38-
<td>N/A</td>
39-
<td>
40-
<RuleID id="a7da00c63c4243d2a72456fe4f59ff26" />
41-
</td>
42-
<td>Generic Rules - Prototype Pollution - Body</td>
43-
<td>This is a new detection</td>
44-
</tr>
45-
<tr>
46-
<td>2025-10-27</td>
47-
<td>2025-11-10</td>
48-
<td>Log</td>
49-
<td>N/A</td>
50-
<td>
51-
<RuleID id="833078bdcfa04bb7aa7b8fb67efbeb39" />
52-
</td>
53-
<td>Generic Rules - Prototype Pollution - Header - Form</td>
54-
<td>This is a new detection</td>
55-
</tr>
56-
<tr>
57-
<td>2025-10-27</td>
58-
<td>2025-11-10</td>
59-
<td>Log</td>
60-
<td>N/A</td>
61-
<td>
62-
<RuleID id="818d92d370654c3d8f1adc7c9029cd61" />
63-
</td>
64-
<td>HTTP Truncated Beta</td>
65-
<td>This is a beta detection and will replace the action on original detection (ID: <RuleID id="646bccf7e9dc46918a4150d6c22b51d3" />) </td>
66-
</tr>
67-
</tbody>
11+
<thead>
12+
<tr>
13+
<th>Announcement Date</th>
14+
<th>Release Date</th>
15+
<th>Release Behavior</th>
16+
<th>Legacy Rule ID</th>
17+
<th>Rule ID</th>
18+
<th>Description</th>
19+
<th>Comments</th>
20+
</tr>
21+
</thead>
22+
<tbody>
23+
<tr>
24+
<td>2025-11-10</td>
25+
<td>2025-11-17</td>
26+
<td>Log</td>
27+
<td>N/A</td>
28+
<td>
29+
<RuleID id="ec1e2aa190e64e7cb468e16dd256f4bc" />
30+
</td>
31+
<td>DELMIA Apriso - Auth Bypass - CVE:CVE-2025-6205</td>
32+
<td>This is a new detection</td>
33+
</tr>
34+
</tbody>
6835
</table>

0 commit comments

Comments
 (0)