On this page
Atomicorp WAF Rule 398005
Rule Summary
- Rule ID: 398005
- Status: Active
- Alert message: Atomicorp.com WAF Rules: SSRF attempt - loopback hostname in URL parameter
- Observed CWEs: CWE-79 (2), CWE-601 (1)
- Revision: 2
- Rule severity: Error (3)
- Phase: 2 (request body)
- Request surfaces: Request arguments, JSON request data, SOAP request data, XML request data
- Rule action: pass
- Public tags: no_ar
- Logging: log, auditlog
Description
This rule detects behavior identified by its current alert as “SSRF attempt - loopback hostname in URL parameter” in the request arguments, JSON request data, SOAP request data, XML request data. It evaluates during the request body phase and records the match without a disruptive action.
Selected Related CVEs
This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.
| CVE | Vulnerability | Product | CVSS | Severity |
|---|---|---|---|---|
| CVE-2021-24245 | WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting (XSS) | stop spammers | 6.1 (v3.1) | Medium |
| CVE-2024-25608 | Liferay Portal - Open Redirect | digital experience platform,liferay portal | 6.1 (v3.1) | Medium |
| CVE-2020-29240 | LEPTON CMS 4.7.0 - 'URL' Persistent Cross-Site Scripting | leptoncms | 4.8 (v3.1) | Medium |
Observed CWEs
These CWEs are recorded on published CVEs in the selected observations associated with this rule. They are observational relationships, not a claim that the rule universally blocks every vulnerability assigned to a CWE.
| CWE | Related Published CVEs |
|---|---|
| CWE-79 | CVE-2021-24245 , CVE-2020-29240 |
| CWE-601 | CVE-2024-25608 |