See https://developers.cloudflare.com/waf/change-log/2025-04-22/ rule 100741. It... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

Null-Set 59 days ago | parent | context | favorite | on: Writing "/etc/hosts" breaks the Substack editor

See https://developers.cloudflare.com/waf/change-log/2025-04-22/ rule 100741.

It references this CVE https://github.com/tuo4n8/CVE-2023-22047 which allows the reading of system files. The example given shows them reading /etc/passwd

Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact