CVE-2025-57822: Next.js Middleware – Server-Side Request Forgery

CVE-2025-57822: Next.js Middleware - Server-Side Request Forgery-渗透云记 - 专注于网络安全与技术分享
CVE-2025-57822: Next.js Middleware – Server-Side Request Forgery
此内容为付费阅读,请付费后查看
100积分
付费阅读

漏洞标题

CVE-2025-57822: Next.js Middleware – Server-Side Request Forgery

漏洞描述

In Next.js prior to versions 14.2.32 and 15.4.7, when request headerswere insecurely passed to NextResponse.next(), an attacker could exploit this behavior to perform Server-Side Request Forgery (ssrf) attacks.

PoC代码

© 版权声明
THE END
喜欢就支持一下吧
点赞0 分享