add waf exemption for 932110 in loki & prom

small-hack / argocd-apps

Common Argo CD templates we use for self hosted cloud stuff. We're still working towards full stability, but feel free to take things or ask questions :)

GNU General Public License v3.0

16 stars 1 forks source link

add waf exemption for 932110 in loki & prom #1036

Closed cloudymax closed 3 days ago

cloudymax commented 3 days ago

Prevents the following when accessing kubernetes-compute-resources-cluster dashboard:

Tue Jul 2 20:44:45 2024 Severity: 2 Rule: 932110 Reason: Remote Command Execution: Windows Command Injection Event: request for 10.42.0.17:443/api/ds/query?ds_type=prometheus&requestId=mixed-0-Q892 from 192.168.1.1