On this page
Atomicorp WAF Rule 340024
Rule Summary
- Rule ID: 340024
- Status: Active
- Alert message: Atomicorp.com WAF Rules: Generic Path Recursion (:: separator) denied
- Observed CWEs: CWE-552 (1)
- Revision: 1
- Rule severity: Critical (2)
- Request surfaces: Request URI, Request headers, Request arguments, JSON request data, SOAP request data
- Rule action: deny
- HTTP status: 403
- Logging: log, auditlog
Description
This rule detects behavior identified by its current alert as “Generic Path Recursion (:: separator) denied” in the request URI, request headers, request arguments, JSON request data, SOAP request data. denies matching traffic with HTTP status 403.
Selected Related CVEs
This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.
| CVE | Vulnerability | Product | CVSS | Severity |
|---|---|---|---|---|
| CVE-2026-21589 | Atlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File Read | jira,confluence,bitbucket | 9.3 (v4.0) | Critical |
Observed CWEs
These CWEs are recorded on published CVEs in the selected observations associated with this rule. They are observational relationships, not a claim that the rule universally blocks every vulnerability assigned to a CWE.
| CWE | Related Published CVEs |
|---|---|
| CWE-552 | CVE-2026-21589 |