Hemi VDP · Report #2991326
Cloudflare WAF Bypass - Origin IP Exposure
Validstatus
mediumseverity
118upvotes
27 Mar 2025disclosed
Summary
An IP address belonging to a server operated by Hemi was accessible from the internet, allowing Cloudflare to be bypassed.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.