
Test application for CVE-2025-29927, designed for security study groups to demonstrate and verify the web vulnerability in a controlled environment.
We introduced this vulnerability at the 51st Security Study Group for Beginners. The presentation slides are available here.
Access the app using one of the methods below. Detailed usage is described on the app's top page.
A container image is available; pull and run it:
docker run -p 3000:3000 my-container.sakuracr.jp/cve-2025-29927-test:1.1
You can also clone this repository and build the container:
git clone [email protected]:kuzushiki/CVE-2025-29927-test.git
cd CVE-2025-29927-test
docker build . -t cve-2025-29927-test
docker run -p 3000:3000 cve-2025-29927-test
Then access http://localhost:3000/ .
You can access it via the following URL. We plan to host it as long as Sakura Cloud's AppRun remains free. Please be patient as responses may sometimes be slow.
After cloning this repository, run npm i and npm run dev to start.
git clone [email protected]:kuzushiki/CVE-2025-29927-test.git
cd CVE-2025-29927-test
npm i
npm run dev
Then access http://localhost:3000/ .