The Cloudflare Bug Bounty program and Cloudflare Pages

What this post added

This post details six security vulnerabilities discovered in Cloudflare Pages' CI/CD build pipeline and publishing process by security researchers. It describes command injection flaws in `CLONE_REPO` and `PUBLISH_ASSETS`, API key disclosure due to incorrect file permissions, bash path injection, an Azure pipelines escape via the docker socket, and a Kubernetes API access issue due to a missing iptables rule. The post outlines the remediation steps taken, including input validation fixes, secret rotation, permission adjustments, architectural changes (adopting gVisor, migrating to Kubernetes), and customer notifications. It highlights the importance of the bug bounty program in identifying and fixing these issues.