CVE-2025-27415

creationtimestamp| type| source ---|---|--- 2025-03-19 19:18:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8125 2025-03-19 20:48:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkr2mxpqkl2m 2025-03-19 22:01:14+00:00| published-proof-of-concept|...

CVE-2025-27415

Nuxt is an open-source web development framework for Vue.js. Prior to 3.16.0, by sending a crafted HTTP request to a server behind an CDN, it is possible in some circumstances to poison the CDN cache and highly impacts the availability of a site. It is possible to craft a request, such as...

CVE-2025-27415

CVE-2025-27415 affects Nuxt (Vue.js framework) prior to version 3.16.0. A crafted HTTP request sent to a server behind a CDN can poison the CDN cache under certain conditions, potentially rendering JSON like https://mysite.com/?/_payload.json and causing the cached response to be served to future...

CVE-2025-27415 Nuxt allows DOS via cache poisoning with payload rendering response

Nuxt is an open-source web development framework for Vue.js. Prior to 3.16.0, by sending a crafted HTTP request to a server behind an CDN, it is possible in some circumstances to poison the CDN cache and highly impacts the availability of a site. It is possible to craft a request, such as...