CVE-2025-29927: Improper Authorization in Next.js, 9.1 rating 🔥
The vulnerability allows an attacker to bypass authorization in a Next.js application if it is performed through middleware.
Search at Netlas.io:
👉 Link: https://nt.ls/MFbwd
👉 Dork: http.headers.x_powered_by:"Next.js"
Vendor's advisory: https://github.com/vercel/next.js/security/advisories/GHSA-f82v-jwr5-mffw
Post #368
549
- 🔥 4
- 👍 2
- 👾 2