Origin IP found, Cloudflare bypassed
Medium
C
CS Money
Submitted None
Actions:
Reported by
sawmj
Vulnerability Details
Technical details and impact analysis
Greetings!, Hope Y'all good and fine.
## Summary:
I would like to report another vulnerability very Similar to my other report in #975991
Due to lack of secure design, I was able to find the origin IPs behind Cloludflare WAF.
The IPs I found belong to :
3d.cs.money
## Description:
I was able to find and access the Origin IPs behind the WAF due to lack of access control,
I could also port scan the IP
The IP found :
51.83.253.82
## Steps To Reproduce:
simply visit:
https://51.83.253.82/
## Impact
As reported in many other submissions, Cloudflare bypasses can have a significant impact, as any adversary is now able to communicate with the origin server directly, enabling them to perform unfiltered attacks (such as denial-of-service), and data retrieval.
This attack vector can be extremely bad because with the IP found out an attacker could attack the servers by DDoS or other attacks without being stopped by CloudFlare.]
Thanks!
Report Details
Additional information and metadata
State
Closed
Substate
Not-Applicable
Submitted
Weakness
Violation of Secure Design Principles