Next.js Middleware 15.2.2 - Authorization Bypass
ποΈΒ 05 Apr 2025Β 00:00:00Reported byΒ kOaDTTypeΒ
Β exploitdbπΒ www.exploit-db.comπΒ 400Β Views
| Reporter | Title | Published | Views | Family All 261 |
|---|---|---|---|---|
| Exploit for Server-Side Request Forgery in Microsoft | 9 Jun 202506:46 | β | githubexploit | |
| Exploit for CVE-2025-29927 | 28 Apr 202511:14 | β | githubexploit | |
| Exploit for CVE-2025-29927 | 24 Mar 202513:27 | β | githubexploit | |
| Exploit for CVE-2025-29927 | 25 Apr 202508:51 | β | githubexploit | |
| Exploit for CVE-2025-29927 | 27 Mar 202511:48 | β | githubexploit | |
| Exploit for CVE-2025-29927 | 23 Mar 202519:41 | β | githubexploit | |
| kBxAc-CTF-2026 | 12 Oct 202618:58 | β | githubexploit | |
| Exploit for CVE-2025-29927 | 25 Mar 202510:30 | β | githubexploit | |
| Exploit for CVE-2025-29927 | 23 Mar 202521:42 | β | githubexploit | |
| Exploit for CVE-2025-29927 | 28 Aug 202506:55 | β | githubexploit |
10
# Exploit Title: Next.js Middleware Bypass Vulnerability (CVE-2025-29927)
# Date: 2025-03-26
# Exploit Author: kOaDT
# Vendor Homepage: https://nextjs.org/
# Software Link: https://github.com/vercel/next.js
# Version: 13.0.0 - 13.5.8 / 14.0.0 - 14.2.24 / 15.0.0 - 15.2.2 / 11.1.4 - 12.3.4
# Tested on: Ubuntu 22.04.5 LTS
# CVE: CVE-2025-29927
# PoC: https://raw.githubusercontent.com/kOaDT/poc-cve-2025-29927/refs/heads/main/exploit.js
# POC GitHub Repository: https://github.com/kOaDT/poc-cve-2025-29927/tree/mainData
Build on a solid foundation withΒ Vulners data
WeΒ provide theΒ essential building blocks forΒ cybersecurity solutions withΒ comprehensive, structured, andΒ constantly updated vulnerability andΒ exploits data
Api
Power your application withΒ Vulners API
The Vulners REST API offers reliable, high-performance access toΒ vulnerabilityΒ intelligence, withΒ 99.9%Β SLAΒ uptime andΒ CDN-backed data delivery forΒ seamlessΒ global access
App
Assess and manage vulnerabilities withΒ VulnersΒ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
05 Apr 2025 00:00Current
7.3High risk
Vulners AI Score7.3
CVSS 3.19.1
EPSS0.99225
SSVC