CFADVISORY-CL-application-security-waf-waf-release-2025-03-10

Exploit Intelligence

• charlesjson/CVE-2023-20198 (github-poc)
• charlesjson/CVE-2023-20198 (github-poc-repo)
• raystr-atearedteam/CVE-2023-20198-checker (github-poc-repo)
• CVE-2023-20198 PoC (!) (github-poc-repo)
• emomeni/Simple-Ansible-for-CVE-2023-20198 (github-poc-repo)
• Checker for CVE-2023-20198 , Not a full POC Just checks the implementation and detects if hex is in response or not (github-poc-repo)
• cisco-CVE-2023-20198-tester (github-poc-repo)
• 1vere$k POC on the CVE-2023-20198 (github-poc-repo)
• A PoC for CVE 2023-20198 (github-poc-repo)
• CVE-2023-20198 Checkscript (github-poc-repo)

…and 83 more exploits

Timeline

• Mar 10, 2025 CVE Published

References

• WAF - WAF Release - 2025-03-10 advisory