logoalt Hacker News

tom_usherlast Tuesday at 4:38 PM3 repliesview on HN

Seems to be a change in Cloudflare's managed WAF ruleset - any site using that will have URLs containing 'camel' blocked due to the 'Apache Camel - Remote Code Execution - CVE:CVE-2025-29891' (a9ec9cf625ff42769298671d1bbcd247) rule.

That rule can be overridden if you're having this issue on your own site.


Replies

internetterlast Tuesday at 7:52 PM

> any site using that will have URLs containing 'camel' blocked

What engineer at cloudflare thought this was a good resolution?

show 2 replies
oncallthrowlast Tuesday at 6:38 PM

WAFs are so shit

show 2 replies