diff --git a/src/content/docs/waf/change-log/2025-04-01.mdx b/src/content/docs/waf/change-log/2025-04-01.mdx new file mode 100644 index 000000000000000..dc861a340ad4be2 --- /dev/null +++ b/src/content/docs/waf/change-log/2025-04-01.mdx @@ -0,0 +1,235 @@ +--- +title: "2025-04-01" +type: table +pcx_content_type: release-notes +sidebar: + order: 794 +tableOfContents: false +--- + +import { RuleID } from "~/components"; + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionComments
Cloudflare Managed Ruleset + + 100732Sitecore - Code Injection - CVE:CVE-2025-27218LogBlockThis is a New Detection
Cloudflare Managed Ruleset + + 100733Angular-Base64-Upload - Remote Code Execution - CVE:CVE-2024-42640LogBlockThis is a New Detection
Cloudflare Managed Ruleset + + 100734Apache Camel - Remote Code Execution - CVE:CVE-2025-29891LogBlockThis is a New Detection
Cloudflare Managed Ruleset + + 100735Progress Software WhatsUp Gold - Remote Code Execution - CVE:CVE-2024-4885LogBlockThis is a New Detection
Cloudflare Managed Ruleset + + 100737Apache Tomcat - Remote Code Execution - CVE:CVE-2025-24813LogBlockThis is a New Detection
Cloudflare Managed Ruleset + + 100659Common Payloads for Server-side Template InjectionN/ADisabledN/A
Cloudflare Managed Ruleset + + 100659Common Payloads for Server-side Template Injection - Base64N/ADisabledN/A
Cloudflare Managed Ruleset + + 100642LDAP InjectionN/ADisabledN/A
Cloudflare Managed Ruleset + + 100642LDAP Injection Base64N/ADisabledN/A
Cloudflare Managed Ruleset + + 100005DotNetNuke - File Inclusion - CVE:CVE-2018-9126, CVE:CVE-2011-1892, CVE:CVE-2022-31474N/ABlockN/A
Cloudflare Managed Ruleset + + 100527Apache Struts - CVE:CVE-2021-31805N/ABlockN/A
Cloudflare Managed Ruleset + + 100702Command Injection - CVE:CVE-2022-24108N/ABlockN/A
Cloudflare Managed Ruleset + + 100622CIvanti - Command Injection - CVE:CVE-2023-46805, CVE:CVE-2024-21887, CVE:CVE-2024-22024N/ABlockN/A
Cloudflare Managed Ruleset + + 100536CGraphQL Command InjectionN/ADisabledN/A
Cloudflare Managed Ruleset + + 100536GraphQL InjectionN/ABlockN/A
Cloudflare Managed Ruleset + + 100536AGraphQL IntrospectionN/ADisabledN/A
Cloudflare Managed Ruleset + + 100536BGraphQL SSRFN/ADisabledN/A
Cloudflare Managed Ruleset + + 100559APrototype Pollution - Common PayloadsN/ADisabledN/A
Cloudflare Managed Ruleset + + 100559APrototype Pollution - Common Payloads - Base64N/ADisabledN/A
diff --git a/src/content/docs/waf/change-log/scheduled-changes.mdx b/src/content/docs/waf/change-log/scheduled-changes.mdx index bec39e085dbea23..518b6c3fdfadf70 100644 --- a/src/content/docs/waf/change-log/scheduled-changes.mdx +++ b/src/content/docs/waf/change-log/scheduled-changes.mdx @@ -25,63 +25,14 @@ import { RSSButton, RuleID } from "~/components"; - 2025-03-17 2025-04-01 + 2025-04-07 Log - 100732 + 100739A - + - Sitecore - Code Injection - CVE:CVE-2025-27218 - This is a New Detection - - - 2025-03-17 - 2025-04-01 - Log - 100733 - - - - - Angular-Base64-Upload - Remote Code Execution - CVE:CVE-2024-42640 - - This is a New Detection - - - 2025-03-17 - 2025-04-01 - Log - 100734 - - - - Apache Camel - Remote Code Execution - CVE:CVE-2025-29891 - This is a New Detection - - - 2025-03-17 - 2025-04-01 - Log - 100735 - - - - - Progress Software WhatsUp Gold - Remote Code Execution - - CVE:CVE-2024-4885 - - This is a New Detection - - - 2025-03-21 - 2025-04-01 - Log - 100737 - - - - Apache Tomcat - Remote Code Execution - CVE:CVE-2025-24813 + Next.js - Auth Bypass - CVE:CVE-2025-29927 - 2 This is a New Detection diff --git a/src/content/release-notes/waf.yaml b/src/content/release-notes/waf.yaml index 0b5fbfd19d8b476..985e0fc16a1056f 100644 --- a/src/content/release-notes/waf.yaml +++ b/src/content/release-notes/waf.yaml @@ -5,11 +5,14 @@ productLink: "/waf/" productArea: Application security productAreaLink: /fundamentals/reference/changelog/security/ entries: - - publish_date: "2025-03-17" - scheduled_date: "2025-04-01" + - publish_date: "2025-04-01" + scheduled_date: "2025-04-07" individual_page: true scheduled: true link: "/waf/change-log/scheduled-changes/" + - publish_date: "2025-04-01" + individual_page: true + link: "/waf/change-log/2025-04-01/" - publish_date: "2025-03-22" individual_page: true link: "/waf/change-log/2025-03-22-emergency/"