Cloudflare's Handling of an RCE Vulnerability in cdnjs
Jul 24, 2021Jonathan Ganz, Thomas Calderon, Sven Sauleau
Summary
This post details Cloudflare's response to a Remote Code Execution (RCE) vulnerability discovered in cdnjs, a platform that utilizes Cloudflare's services. It highlights Cloudflare's rapid incident response, including blocking exploitation, revoking credentials, and investigating potential abuse. The post also outlines the remediation efforts, which involved fixing path traversal issues, implementing AppArmor profiles, and a complete redesign of the auto-update pipeline using a microservices architecture with sandboxed Docker containers to enhance security and prevent future vulnerabilities.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack