vulnerability-in-Remix-React-Router-CVE-2025-31137-

概述 在阅读了 @zhero 在其个人博客文章中的分析后，我决定构建这个 CTF 来学习其工作原理，之后我决定将其分享给任何想学习如何利用此漏洞的人。我尝试使用 [email protected] 版本构建 CTF，但当我检查 @remix-run/express 时，注意到他们已修补了代码，于是我从他们的 GitHub 复制粘贴了存在漏洞的代码，因此你必须按照下面的说明修改 @remix-run/express 包的代码。 目标 你必须在管理员页面中找到 flag，应用程序的其他部分无法正常工作，所以只需专注于管理员页面并找到...

@common-stack/frontend-stack-react (>=8.0.1-alpha.0, <=8.4.1-alpha.0), @epic-web/workshop-app (>=5.6.0, <=5.28.0) +4 more potentially affected by CVE-2025-31137 via @remix-run/express (>=2.11.1, <=2.16.2-pre.0)

@remix-run/express NPM version =2.11.1, =8.0.1-alpha.0, =5.6.0, =0.1.49, =2.11.1-pre.0, =0.0.5, =3.0.0, =3.4.6 Source cves: CVE-2025-31137 Source advisory: OSV:GHSA-4Q56-CRQP-V477...

CVE-2025-31137

React Router is a multi-strategy router for React bridging the gap from React 18 to React 19. There is a vulnerability in Remix/React Router that affects all Remix 2 and React Router 7 consumers using the Express adapter. Basically, this vulnerability allows anyone to spoof the URL used in an...

CVE-2025-31137

creationtimestamp| type| source ---|---|--- 2025-04-01 18:32:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9963 2025-04-01 19:36:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114264388612256212 2025-04-01 19:36:44+00:00| seen|...

CVE-2025-31137 Remix and React Router allow URL manipulation via Host / X-Forwarded-Host headers

React Router is a multi-strategy router for React bridging the gap from React 18 to React 19. There is a vulnerability in Remix/React Router that affects all Remix 2 and React Router 7 consumers using the Express adapter. Basically, this vulnerability allows anyone to spoof the URL used in an...

CVE-2025-31137 Remix and React Router allow URL manipulation via Host / X-Forwarded-Host headers

React Router is a multi-strategy router for React bridging the gap from React 18 to React 19. There is a vulnerability in Remix/React Router that affects all Remix 2 and React Router 7 consumers using the Express adapter. Basically, this vulnerability allows anyone to spoof the URL used in an...