Atomicorp WAF Rule 390500

Rule Summary

• Rule ID: 390500
• Status: Active
• Alert message: Atomicorp.com Malware Script Blacklist: Possible Malware Script detected in URL
• Observed CWEs: CWE-601 (1)
• Revision: 2
• Rule severity: Critical (2)
• Phase: 2 (request body)
• Request surfaces: Request URI
• Logging: log, auditlog

Description

This rule detects behavior identified by its current alert as “Possible Malware Script detected in URL” in the request URI. It evaluates during the request body phase.

Selected Related CVEs

This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.

Observed CWEs

These CWEs are recorded on published CVEs in the selected observations associated with this rule. They are observational relationships, not a claim that the rule universally blocks every vulnerability assigned to a CWE.