On this page
Atomicorp WAF Rule 390735
Rule Summary
- Rule ID: 390735
- Status: Active
- Alert message: Atomicorp.com WAF Rules: HTTP Header Injection Attack via payload (CR/LF detected)
- Observed CWEs: None documented
- Rule severity: Alert (1)
- Phase: 2 (request body)
- Request surfaces: Request headers
- Rule action: deny
- HTTP status: 403
- Public tags: attack-protocol
- Logging: log, auditlog
Description
This rule detects behavior identified by its current alert as “HTTP Header Injection Attack via payload (CR/LF detected)” in the request headers. It evaluates during the request body phase and denies matching traffic with HTTP status 403.
Selected Related CVEs
This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.
No selected related public CVE research notes are currently published.