USING CLOUDFLARE TO BYPASS CLOUDFLARE

Summary from the TLDR InfoSec newsletter

Cloudflare has a vulnerability where customer-configured protection mechanisms can be bypassed due to gaps in cross-tenant security controls, potentially exposing customers to attacks Cloudflare is supposed to prevent.