Cloudbleed – Massive bug leaks private data from Cloudflare

[Kevin Lancaster]

Cloudbleed – Massive bug leaks private data from Cloudflare

Cloudflare said a serious bug in its end servers caused private data to leak in response to clients requesting pages from Cloudlfare-protected sites.

The leaked information included HTTP cookies, authentication tokens, and HTTP POST bodies.

 

[LazyLion]

Yeah these constant cloudbursts are getting to me too.

Do we need to change our PW's?

 

[Thor]

Damn

 

[MagicDude4Eva]

My title was better: Massive user data leak on MyBroadband (and others) due to Cloudbleed issue

https://mybroadband.co.za/vb/showthread.php?t=874068

 

[whatwhat]

Only about 4.2 million affected domains.

 

[ajan]

I like how they leave out the part that they are affected.

 

[RyanPCMR]

Like they say in Mr Robot, control is an illusion. I believe in that with all my heart.

 

[MagicDude4Eva]

I like how they leave out the part that they are affected.

BTW: Cloudflare's email "you were not affected" can not be trusted as it solely relies on the fact that leaked data was cached by search engines. It is entirely possible that CF proxy customers such as MyBB had data leaked that did not end up in search engine caches. There are many darknet search engines Cloudflare has not mentioned and URLs for some of the mentioned domains have been crawled and are available.