Changelog

New updates and improvements at Cloudflare.

Subscribe to RSS
View all RSS feeds

← Back to all posts

WAF Release - 2025-04-02

Apr 02, 2025

WAF

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Managed Ruleset	...622f0483	100732	Sitecore - Code Injection - CVE:CVE-2025-27218	Log	Block	This is a New Detection
Cloudflare Managed Ruleset	...0f101cca	100733	Angular-Base64-Upload - Remote Code Execution - CVE:CVE-2024-42640	Log	Block	This is a New Detection
Cloudflare Managed Ruleset	...1bbcd247	100734	Apache Camel - Remote Code Execution - CVE:CVE-2025-29891	Log	Disabled	This is a New Detection
Cloudflare Managed Ruleset	...90aea1ca	100735	Progress Software WhatsUp Gold - Remote Code Execution - CVE:CVE-2024-4885	Log	Block	This is a New Detection
Cloudflare Managed Ruleset	...d9d8c5f2	100737	Apache Tomcat - Remote Code Execution - CVE:CVE-2025-24813	Log	Block	This is a New Detection
Cloudflare Managed Ruleset	...a28a42c4	100659	Common Payloads for Server-side Template Injection	N/A	Disabled	N/A
Cloudflare Managed Ruleset	...daa4b037	100659	Common Payloads for Server-side Template Injection - Base64	N/A	Disabled	N/A
Cloudflare Managed Ruleset	...48f6a9cf	100642	LDAP Injection	N/A	Disabled	N/A
Cloudflare Managed Ruleset	...e0713e9f	100642	LDAP Injection Base64	N/A	Disabled	N/A
Cloudflare Managed Ruleset	...1bc977d1	100005	DotNetNuke - File Inclusion - CVE:CVE-2018-9126, CVE:CVE-2011-1892, CVE:CVE-2022-31474	N/A	Disabled	N/A
Cloudflare Managed Ruleset	...bb70a463	100527	Apache Struts - CVE:CVE-2021-31805	N/A	Block	N/A
Cloudflare Managed Ruleset	...0c99546a	100702	Command Injection - CVE:CVE-2022-24108	N/A	Block	N/A
Cloudflare Managed Ruleset	...9a5581d0	100622C	Ivanti - Command Injection - CVE:CVE-2023-46805, CVE:CVE-2024-21887, CVE:CVE-2024-22024	N/A	Block	N/A
Cloudflare Managed Ruleset	...06d0b009	100536C	GraphQL Command Injection	N/A	Disabled	N/A
Cloudflare Managed Ruleset	...1651d0c8	100536	GraphQL Injection	N/A	Disabled	N/A
Cloudflare Managed Ruleset	...af00f61d	100536A	GraphQL Introspection	N/A	Disabled	N/A
Cloudflare Managed Ruleset	...a41e5b67	100536B	GraphQL SSRF	N/A	Disabled	N/A
Cloudflare Managed Ruleset	...433e5b3d	100559A	Prototype Pollution - Common Payloads	N/A	Disabled	N/A
Cloudflare Managed Ruleset	...4816b26f	100559A	Prototype Pollution - Common Payloads - Base64	N/A	Disabled	N/A
Cloudflare Managed Ruleset	...fcea5ed2	100734	Apache Camel - Remote Code Execution - CVE:CVE-2025-29891	N/A	Disabled	N/A