Website Security & Threat Management
Incorrect proxying of 24 hostnames on January 24, 2022

Incorrect proxying of 24 hostnames on January 24, 2022

1/26/2022 · Jeremy Hartman

What this post added

This post details an incident where a product migration for Cloudflare for SaaS resulted in 24 hostnames, including www.cloudflare.com, being incorrectly proxied to the wrong origin (clickfunnels.com). It highlights a critical failure in the migration process for 'blocked' hostnames, leading to unintended traffic redirection. The post outlines the immediate remediation steps, the scale of the impact, and crucial procedural and technical follow-ups to prevent recurrence, such as stricter validation for blocked hostnames and enhanced monitoring during migrations.

Read the original post ↗