Using Cloudflare to bypass Cloudflare by Stefan Proksch

Firewall Bypass

Attackers can utilize their own Cloudflare accounts to abuse the per-design trust-relationship between Cloudflare and the customers websites, rendering the protection mechanism ineffective.

https://certitude.consulting/blog/en/using-cloudflare-to-bypass-cloudflare/