Home / Companies / Cloudflare / Blog / Post Details
Content Deep Dive

Keeping Drupal sites safe with Cloudflare's WAF

Blog post from Cloudflare

Post Details
Company
Date Published
Author
Maitane Zotes
Word Count
399
Company Posts That Month
19
Language
English
Hacker News Points
-
Post removed?
No
Summary

Cloudflare's security analyst team has successfully protected users against a major vulnerability in Drupal CMS, known as Drupalgeddon 2. The company implemented a Web Application Firewall (WAF) rule that identified and blocked malicious requests exploiting the critical remote code execution Drupal exploit. Since adding protection with WAF rule ID D0003 on April 13th, more than 500,000 potential attacks have been blocked. The most common attack attempts involve injecting a renderable array in POST requests to exploit the 'mail' field. Cloudflare continues to block over 56,000 potential attacks per day.

Trends Found in this Post

No tracked trend matches for this post yet.

Use This Data

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.