Minor ImpactLast updated: Apr 1, 2025, 7:42 PM UTCFetched just now

Cloudflare WAF False Positives

Started

Apr 1, 2025, 5:03 PM UTC

Resolved

Apr 1, 2025, 7:42 PM UTC

Timeline

ResolvedApr 1, 2025, 7:42 PM UTC
This issue is now resolved.
MonitoringApr 1, 2025, 5:31 PM UTC
We have disabled the rule in question, and the rate of false positives is decreasing. We are monitoring.
IdentifiedApr 1, 2025, 5:03 PM UTC
Cloudflare has identified an issue with the managed ruleset "Apache Camel - Remote Code Execution - CVE:CVE-2025-29891" which is potentially causing false positives. Customers can disable this rule by setting Action -> Log in the Cloudflare Dashboard. Other WAF rules are unaffected. We are currently working on a fix for this issue.