vulnerability-in-Remix-React-Router-CVE-2025-31137-

Panoramica Dopo aver letto il write-up di @zhero nel suo blog personale, ho deciso di costruire questa CTF per imparare come funzionano le cose; dopo di che ho deciso di condividerla con chiunque voglia imparare a sfruttare questa vulnerabilità. Ho provato a creare la CTF con la versione...

@common-stack/frontend-stack-react (>=8.0.1-alpha.0, <=8.4.1-alpha.0), @epic-web/workshop-app (>=5.6.0, <=5.28.0) +4 more potentially affected by CVE-2025-31137 via @remix-run/express (>=2.11.1, <=2.16.2-pre.0)

@remix-run/express NPM version =2.11.1, =8.0.1-alpha.0, =5.6.0, =0.1.49, =2.11.1-pre.0, =0.0.5, =3.0.0, =3.4.6 Source cves: CVE-2025-31137 Source advisory: OSV:GHSA-4Q56-CRQP-V477...

CVE-2025-31137

React Router is a multi-strategy router for React bridging the gap from React 18 to React 19. There is a vulnerability in Remix/React Router that affects all Remix 2 and React Router 7 consumers using the Express adapter. Basically, this vulnerability allows anyone to spoof the URL used in an...

CVE-2025-31137

creationtimestamp| type| source ---|---|--- 2025-04-01 18:32:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9963 2025-04-01 19:36:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114264388612256212 2025-04-01 19:36:44+00:00| seen|...

CVE-2025-31137 Remix and React Router allow URL manipulation via Host / X-Forwarded-Host headers

React Router is a multi-strategy router for React bridging the gap from React 18 to React 19. There is a vulnerability in Remix/React Router that affects all Remix 2 and React Router 7 consumers using the Express adapter. Basically, this vulnerability allows anyone to spoof the URL used in an...

CVE-2025-31137 Remix and React Router allow URL manipulation via Host / X-Forwarded-Host headers

React Router is a multi-strategy router for React bridging the gap from React 18 to React 19. There is a vulnerability in Remix/React Router that affects all Remix 2 and React Router 7 consumers using the Express adapter. Basically, this vulnerability allows anyone to spoof the URL used in an...