Lack of Packet Sanitation in Goflow Results in Multiple DoS Attack Vectors and Bugs #1636320 Valid Denial of Service High 2022-09-30 $500 8 Bypass Cloudflare WARP lock on iOS. #1542450 Valid Input Validation and Logic Medium 2022-11-07 $500 10 Password Policy Restriction Bypass #1675730 Valid Misconfiguration and Insecure Design Low 2022-09-30 – 11 Misconfigured build on websites "abuse.cloudflare.com" #1624911 Valid No weakness recorded Low 2022-10-13 $100 12 Ability to bypass locked Cloudflare WARP on wifi networks. #1635748 Valid Input Validation and Logic High 2022-11-16 $1,000 12 Sign in with Apple generates long-life JWTs, seemingly irrevocable, that grant immediate access to accounts #1593413 Valid Authentication Low 2022-06-27 $250 17 I found another way to bypass Cloudflare Warp lock! Analysed #1605847 Valid Input Validation and Logic High 2022-11-07 $1,000 20 Completely remove VPN profile from locked WARP iOS cient. Analysed #1633231 Valid Input Validation and Logic High 2022-11-07 $1,000 21 cd=false (DNSSEC) not respected in DNS over HTTPS JSON requests Analysed #1724464 Valid Input Validation and Logic Low 2022-12-12 $250 23 API docs expose an active token for the sample domain theburritobot.com Analysed #1507412 Valid Information Disclosure High 2022-06-27 $500 28 Take over subdomains of r2.dev using R2 custom domains Analysed #1700276 Valid No weakness recorded Medium 2022-09-28 $1,125 28 Sign in with Apple works on existing accounts, bypasses 2FA Analysed #1593404 Valid Authentication High 2022-06-27 $1,000 32 Bypass two-factor authentication Analysed #1664974 Valid Authentication Low 2022-10-04 $250 34 Bypassing Cache Deception Armor using .avif extension file Analysed #1391635 Valid Information Disclosure Medium 2022-06-27 – 36 Signup with any Email and Enable 2-FA without verifying Email Analysed #1543259 Valid Authentication Medium 2022-09-12 – 40 Enable 2Fa verification without verifying email Analysed #1618021 Valid Access Control Medium 2022-08-31 – 40 HTTP request smuggling with Origin Rules using newlines in the host_header action parameter Analysed #1575912 Valid Injection and Smuggling Critical 2022-06-27 $3,100 46 Blind SSRF on platform.dash.cloudflare.com Due to Sentry misconfiguration Analysed #1467044 Valid Server-Side Request Forgery Low 2022-08-31 – 54 Hijack all emails sent to any domain that uses Cloudflare Email Forwarding Analysed #1419341 Valid Access Control Critical 2022-07-28 $6,000 76 HTTP Request Smuggling in Transform Rules using hexadecimal escape sequences in the concat() function Analysed #1478633 Valid Injection and Smuggling Critical 2022-05-16 $6,000 116