Cloudflare Public Bug Bounty · Report #1467044
Blind SSRF on platform.dash.cloudflare.com Due to Sentry misconfiguration
Validstatus
lowseverity
54upvotes
31 Aug 2022disclosed
Summary
Cloudflare uses Sentry for application monitoring and error tracking. Due to the tool's misconfiguration (source code scraping feature enabled), it was possible to sent blind requests to any endpoints using the Cloudflare infrastructure. The issue has been fixed by the Engineering team and the source code fetching feature was disabled in Sentry.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.