Collected research
Cloudflare Zero-day: Accessing Any Host Globally
Shows that Cloudflare's special ACME challenge path could bypass customer WAF policy and reach otherwise protected origins. The researchers demonstrate constrained access to arbitrary origin hosts through certificate-validation routing and document coordinated remediation.
Record
- Researcher
- k_firsov
- Date
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of k_firsov, first published at the original source. Preserved copies are kept so the citation survives its host.