News for hackers. Stuff that matters.

A comment on Drupal Remote Code Execution vulnerability exploited widely. Parent comment

Re:Drupal Remote Code Execution vulnerability exploited widely by Jgrubb on Thursday April 26, 2018 @06:27AM (#16930588)
You really need a Layer 7 kind of thing to be able to inspect the actual payload of the request. I don't think any of those can do that. You'd need an actual WAF.
[ Parent | on HN ]
Re:Drupal Remote Code Execution vulnerability exploited widely by krehl on Thursday April 26, 2018 @06:56AM (#16930751)
Cloudflare was able to protect against Drupalgeddon 2

https://blog.cloudflare.com/keeping-drupal-sites-safe-with-c...

[ Parent | on HN ]
Re:Drupal Remote Code Execution vulnerability exploited widely by Jgrubb on Friday April 27, 2018 @09:05AM (#16940485)
That's a WAF layer though. I don't know of a way to do this with Varnish or a straight CDN.
[ Parent | on HN ]