0.39 Kills all Joomla sites

Hi Yah, just updated to latest ruleset and within seconds of doing so phone started going…all joomla web sites broken, tried restoring previous ruleset and even though it said it had restored it the sites were all down with the following rule 220500.

Tried to use the UI filter to quickly find it and that didn’t work :frowning:

This is the rule that kills it:
Match of “contains /wp-admin/admin.php?page=newsletter-manager-” against “REQUEST_URI” required. [file “/var/cpanel/cwaf/rules/cwaf_05.conf”] [line “910”] [id “220500”]

It kills all sites with rule 220500


Hotfix soon.

fixed in version 0.40