HexBrain

Cloudflare Public Bug Bounty · Report #1467044

Blind SSRF on platform.dash.cloudflare.com Due to Sentry misconfiguration

Validstatus
lowseverity
54upvotes
31 Aug 2022disclosed

Summary

Cloudflare uses Sentry for application monitoring and error tracking. Due to the tool's misconfiguration (source code scraping feature enabled), it was possible to sent blind requests to any endpoints using the Cloudflare infrastructure. The issue has been fixed by the Engineering team and the source code fetching feature was disabled in Sentry.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original