From bd4680521b8b0eecb7f2d527d4b4ce7e632bc2da Mon Sep 17 00:00:00 2001 From: Vaibhav Singhal Date: Tue, 29 Apr 2025 10:16:09 -0700 Subject: [PATCH] Release-Apr-29-2025 --- .../docs/waf/change-log/scheduled-changes.mdx | 62 ++++++++++++++++--- src/content/release-notes/waf.yaml | 4 +- 2 files changed, 56 insertions(+), 10 deletions(-) diff --git a/src/content/docs/waf/change-log/scheduled-changes.mdx b/src/content/docs/waf/change-log/scheduled-changes.mdx index a6d79f985166e2..5ab6bc9b51a673 100644 --- a/src/content/docs/waf/change-log/scheduled-changes.mdx +++ b/src/content/docs/waf/change-log/scheduled-changes.mdx @@ -25,13 +25,59 @@ import { RSSButton, RuleID } from "~/components"; - N/A - N/A - N/A - N/A - N/A - N/A - N/A - + 2025-04-29 + 2025-05-05 + Log + 100724 + + + + GFI KerioControl - Remote Code Execution - CVE:CVE-2024-52875 + This is a New Detection + + + 2025-04-29 + 2025-05-05 + Log + 100748 + + + + XWiki - Remote Code Execution - CVE:CVE-2025-24893 + This is a New Detection + + + 2025-04-29 + 2025-05-05 + Log + 100750 + + + + SonicWall SMA - Dangerous File Upload - CVE:CVE-2021-20040, CVE:CVE-2021-20041, CVE:CVE-2021-20042 + This is a New Detection + + + 2025-04-29 + 2025-05-05 + Log + 100751 + + + + Langflow - Remote Code Execution - CVE:CVE-2025-3248 + This is a New Detection + + + 2025-04-29 + 2025-05-05 + Log + 100752 + + + + MinIO - Auth Bypass - CVE:CVE-2025-31489 + This is a New Detection + diff --git a/src/content/release-notes/waf.yaml b/src/content/release-notes/waf.yaml index 15c5987879a16d..3c04b3c3ad4a73 100644 --- a/src/content/release-notes/waf.yaml +++ b/src/content/release-notes/waf.yaml @@ -5,8 +5,8 @@ productLink: "/waf/" productArea: Application security productAreaLink: /fundamentals/reference/changelog/security/ entries: - - publish_date: "2025-04-14" - scheduled_date: "2025-04-21" + - publish_date: "2025-04-29" + scheduled_date: "2025-05-05" individual_page: true scheduled: true link: "/waf/change-log/scheduled-changes/"