!Next.js Middleware Bypass (CVE-2025-29927)
by Rat1337 - Sunday March 30, 2025 at 06:53 PM
#11
Bakalım gavur oğlu buralarda mı
Reply
#12
lets see it, thnx men
Reply
#13
thank you very much for sharing
Reply
#14
interesting stuffs here
Reply
#15
(03-30-2025, 06:53 PM)Rat1337 Wrote: CVE-2025-29927 is a critical vulnerability in Next.js that allows attackers to bypass authorization checks by manipulating the x-middleware-subrequest
header. This affects versions prior to 14.2.25, 15.2.3, 13.5.9, and 12.3.5. Exploiting this flaw could grant unauthorized access to protected routes. To fix this, update Next.js to the latest patched versions. Additionally, implement secondary validation by adding authentication checks in your API routes, ensuring security isn't reliant solely on middleware.

Alright, let me see
Reply
#16
thx for sharingg
Reply
#17
thnks for this manthnks for this man
Reply
#18
a very nice one tysm
Reply
#19
i didnt known this CVE thx Smile
Reply
#20
yo thank yuuuuuu
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  CVE-2025-40554 - SolarWinds Web Help Desk Auth Bypass & RCE PoC miyako 3 80 02-07-2026, 03:32 PM
Last Post: cysc
  POC CVE-2025-24071 caca28sapo1 15 813 02-07-2026, 08:53 AM
Last Post: hacker0123
  HPE OneView RCE Exploit [CVE-2025-37164] Hawx01 8 265 02-06-2026, 07:08 PM
Last Post: hacker0123
  CitrixBleed / CVE-2023-4966 cccp 10 6,801 02-06-2026, 01:36 AM
Last Post: temptest
  WordPress LFI to RCE - CVE-2025-0366 Serious 1 460 02-05-2026, 09:53 AM
Last Post: Sammm89



 Users browsing this thread: 1 Guest(s)