On this page
Atomicorp WAF Rule 390723
Rule Summary
- Rule ID: 390723
- Status: Active
- Alert message: Atomicorp.com WAF Rules: mod_proxy attack attempt detected
- Observed CWEs: CWE-306 (1), CWE-918 (2)
- Rule severity: Alert (1)
- Phase: 1 (request headers)
- Request surfaces: Raw request URI
- Rule action: deny
- HTTP status: 403
- Public tags: attack-protocol
- Logging: log, auditlog
Description
This rule detects behavior identified by its current alert as “mod_proxy attack attempt detected” in the raw request URI. It evaluates during the request headers phase and denies matching traffic with HTTP status 403.
Selected Related CVEs
This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.
| CVE | Vulnerability | Product | CVSS | Severity |
|---|---|---|---|---|
| CVE-2023-7325 | Mingyu Operations and Maintenance Audit and Risk Control System xmlrpc.sock SSRF | Mingyu Operations and Maintenance Audit and Risk Control System | 9.3 (v4.0) | Critical |
| CVE-2021-40438 | Apache HTTP Server 2.4.48 mod_proxy SSRF (CVE-2021-40438) | rocky linux | 9.0 (v3.1) | Critical |
Observed CWEs
These CWEs are recorded on published CVEs in the selected observations associated with this rule. They are observational relationships, not a claim that the rule universally blocks every vulnerability assigned to a CWE.
| CWE | Related Published CVEs |
|---|---|
| CWE-306 | CVE-2023-7325 |
| CWE-918 | CVE-2023-7325 , CVE-2021-40438 |