3 matches found
OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths
Summary When cache interception is enabled, @opennextjs/cloudflare can interpret percent-encoded paths differently during middleware matching and cache lookup. An encoded request may fail to match authorization middleware, then be decoded into the cache key of a protected route. The cached respon...
7.5CVSS5.8AI score0.00305EPSS
SaveExploits0References7Affected Software1
20