A bypass for AWS WAF using an application/json payload was discovered. This bypass affects various vulnerabilities and can be used to evade the AWS WAF protection. Detailed technical information and steps to reproduce the bypass can be found in the blogpost.
Original tweet: https://twitter.com/Go_NGYO/status/1810462929151738124