Changelog

New updates and improvements at Cloudflare.

Application security

Jan 21, 2025

WAF Release - 2025-01-21

Ruleset	Rule ID	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Managed Ruleset		100303	Command Injection - Nslookup	Log	Block	This was released as
Cloudflare Managed Ruleset		100534	Web Shell Activity	Log	Block	This was released as

Jan 13, 2025

WAF Release - 2025-01-13

WAF

Ruleset	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Managed Ruleset	100704	Cleo Harmony - Auth Bypass - CVE:CVE-2024-55956, CVE:CVE-2024-55953	Log	Block	New Detection
Cloudflare Managed Ruleset	100705	Sentry - SSRF	Log	Block	New Detection
Cloudflare Managed Ruleset	100706	Apache Struts - Remote Code Execution - CVE:CVE-2024-53677	Log	Block	New Detection
Cloudflare Managed Ruleset	100707	FortiWLM - Remote Code Execution - CVE:CVE-2023-48782, CVE:CVE-2023-34993, CVE:CVE-2023-34990	Log	Block	New Detection
Cloudflare Managed Ruleset	100007C_BETA	Command Injection - Common Attack Commands		Disabled

Jan 09, 2025

New Rules Overview Interface
Rules
Rules Overview gives you a single page to manage all your Cloudflare Rules.

What you can do:
- See all your rules in one place – No more clicking around.
- Find rules faster – Search by name.
- Understand execution order – See how rules run in sequence.
- Debug easily – Use Trace without switching tabs.
Check it out in Rules > Overview ↗.

Jan 06, 2025

WAF Release - 2025-01-06

WAF

Ruleset	Legacy Rule ID	Description	Previous Action	New Action	Comments
Cloudflare Specials	100678	Pandora FMS - Remote Code Execution - CVE:CVE-2024-11320	Log	Block	New Detection
Cloudflare Specials	100679	Palo Alto Networks - Remote Code Execution - CVE:CVE-2024-0012, CVE:CVE-2024-9474	Log	Block	New Detection
Cloudflare Specials	100680	Ivanti - Command Injection - CVE:CVE-2024-37397	Log	Block	New Detection
Cloudflare Specials	100681	Really Simple Security - Auth Bypass - CVE:CVE-2024-10924	Log	Block	New Detection
Cloudflare Specials	100682	Magento - XXE - CVE:CVE-2024-34102	Log	Block	New Detection
Cloudflare Specials	100683	CyberPanel - Remote Code Execution - CVE:CVE-2024-51567	Log	Block	New Detection
Cloudflare Specials	100684	Microsoft SharePoint - Remote Code Execution - CVE:CVE-2024-38094, CVE:CVE-2024-38024, CVE:CVE-2024-38023	Log	Block	New Detection
Cloudflare Specials	100685	CyberPanel - Remote Code Execution - CVE:CVE-2024-51568	Log	Block	New Detection
Cloudflare Specials	100686	Seeyon - Remote Code Execution	Log	Block	New Detection
Cloudflare Specials	100687	WordPress - Remote Code Execution - CVE:CVE-2024-10781, CVE:CVE-2024-10542	Log	Block	New Detection
Cloudflare Specials	100688	ProjectSend - Remote Code Execution - CVE:CVE-2024-11680	Log	Block	New Detection
Cloudflare Specials	100689	Palo Alto GlobalProtect - Remote Code Execution - CVE:CVE-2024-5921	Log	Block	New Detection
Cloudflare Specials	100690	Ivanti - Remote Code Execution - CVE:CVE-2024-37404	Log	Block	New Detection
Cloudflare Specials	100691	Array Networks - Remote Code Execution - CVE:CVE-2023-28461	Log	Block	New Detection
Cloudflare Specials	100692	CyberPanel - Remote Code Execution - CVE:CVE-2024-51378	Log	Block	New Detection
Cloudflare Specials	100693	Symfony Profiler - Auth Bypass - CVE:CVE-2024-50340	Log	Block	New Detection
Cloudflare Specials	100694	Citrix Virtual Apps - Remote Code Execution - CVE:CVE-2024-8069	Log	Block	New Detection
Cloudflare Specials	100695	MSMQ Service - Remote Code Execution - CVE:CVE-2023-21554	Log	Block	New Detection
Cloudflare Specials	100696	Nginxui - Remote Code Execution - CVE:CVE-2024-49368	Log	Block	New Detection
Cloudflare Specials	100697	Apache ShardingSphere - Remote Code Execution - CVE:CVE-2022-22733	Log	Block	New Detection
Cloudflare Specials	100698	Mitel MiCollab - Auth Bypass - CVE:CVE-2024-41713	Log	Block	New Detection
Cloudflare Specials	100699	Apache Solr - Auth Bypass - CVE:CVE-2024-45216	Log	Block	New Detection

Dec 19, 2024

Troubleshoot tunnels with diagnostic logs
Cloudflare Tunnel Cloudflare Tunnel for SASE
The latest cloudflared build 2024.12.2 ↗ introduces the ability to collect all the diagnostic logs needed to troubleshoot a cloudflared instance.

A diagnostic report collects data from a single instance of cloudflared running on the local machine and outputs it to a cloudflared-diag file.

For more information, refer to Diagnostic logs.

Dec 11, 2024

Terraform Support for Snippets

Rules

Now, you can manage Cloudflare Snippets with Terraform. Use infrastructure-as-code to deploy and update Snippet code and rules without manual changes in the dashboard.

Example Terraform configuration:

resource "cloudflare_snippet" "my_snippet" {
  zone_id  = "<ZONE_ID>"
  name = "my_test_snippet_1"
  main_module = "file1.js"
  files {
    name = "file1.js"
    content = file("file1.js")
  }
}

resource "cloudflare_snippet_rules" "cookie_snippet_rule" {
  zone_id  = "<ZONE_ID>"
  rules {
    enabled = true
    expression = "http.cookie eq \"a=b\""
    description = "Trigger snippet on specific cookie"
    snippet_name = "my_test_snippet_1"
  }
  depends_on = [cloudflare_snippet.my_snippet]
}

Learn more in the Configure Snippets using Terraform documentation.

Nov 22, 2024

Cloud Connector Now Supports R2

Rules

Now, you can use Cloud Connector to route traffic to your R2 buckets based on URLs, headers, geolocation, and more.

Example setup:

curl --request PUT \
"https://api.cloudflare.com/client/v4/zones/{zone_id}/cloud_connector/rules" \
--header "Authorization: Bearer <API_TOKEN>" \
--header "Content-Type: application/json" \
--data '[
  {
    "expression": "http.request.uri.path wildcard \"/images/*\"",
    "provider": "cloudflare_r2",
    "description": "Connect to R2 bucket containing images",
    "parameters": {
      "host": "mybucketcustomdomain.example.com"
    }
  }
]'

Get started using Cloud Connector documentation.

Oct 23, 2024

Simplified UI for URL Rewrites
Rules
It’s now easy to create wildcard-based URL Rewrites. No need for complex functions—just define your patterns and go.

What’s improved:
- Full wildcard support – Create rewrite patterns using intuitive interface.
- Simplified rule creation – No need for complex functions.
Try it via creating a Rewrite URL rule in the dashboard.

Sep 05, 2024

New Rules Templates for One-Click Rule Creation
Rules
Now, you can create common rule configurations in just one click using Rules Templates.

What you can do:
- Pick a pre-built rule – Choose from a library of templates.
- One-click setup – Deploy best practices instantly.
- Customize as needed – Adjust templates to fit your setup.
Template cards are now also available directly in the rule builder for each product.

Need more ideas? Check out the Examples gallery in our documentation.