Azure Front Door WAF Security Update (CVE-2023-50164) is now available
Azure global WAF has deployed a new managed rule to address security vulnerability CVE-2023-50164, which could potentially impact applications. The fix has been rolled out for the Default Ruleset (DRS) versions 2.1 and 2.0. If an application is vulnerable, it is recommended to change the state of the affected rule from disabled to enabled. The affected rule has ID 99001017, belongs to the Rule Group MS-ThreatIntel-CVEs, and has an anomaly score or block action depending on the DRS version. Azure thanks customers for choosing their web security services.