Cloudflare, security issue (CloudBleed)

[Gianluca]

CloudFlare was recently affected by a security issue, now resolved. You can find a detailed description on their blog: https://blog.cloudflare.com/incident...re-parser-bug/

The issue

CloudFlare acts as an intermediary between the visitor and the server that hosts the target website. A recently discovered bug, could lead to the disclosure of confidential informations (even login passwords or session cookies) belonging to the requests made by the users to the websites delivered by CloudFlare.

The impact on AlterVista users

CloudFlare is available on altervista.org sites and who activated CloudFlare content delivery service is potentially affected by the issue.

What to do

Although CloudFlare has not provided so far to us any evidence about the disclosure of possible confidential data belonging to altervista.org websites, we suggest to CloudFlare users to change their web applications password (such as Wordpress, joomla, etc.)

We are in touch with CloudFlare and we will post here any further update about the issue.

[Gianluca]

CloudFlare confirmed that none of the websites hosted by AlterVista has been affected by the issue