Radware Cloud Web Application Firewall Filter Bypass Vulnerability

A filter bypass vulnerability has been identified in Radware Cloud Web Application Firewall (WAF) versions prior to 2025-05-07. This vulnerability allows remote attackers to evade firewall protections by inserting random data into the HTTP request body while using the HTTP GET method. Additionally, the WAF can be bypassed by including special characters in the request, which the firewall fails to properly validate, allowing various payloads to reach the underlying web application.

Impact

Exploitation of this vulnerability allows attackers to bypass WAF filtering, enabling malicious inputs to reach the protected web application without interference from the firewall.