Exploitation Techniques

Cloudflare Details ACME Bug Allowing WAF Bypass to Origins After October Fix

The issue stemmed from HTTP-01 challenge handling that did not verify tokens for the requested hostname.