(CVE-2025-29927) Next.js 中间件授权检查绕过漏洞

漏洞描述

PoC代码

暂无

相关漏洞推荐

• 无POCNext.js Middleware 服务器端请求伪造漏洞（CVE-2025-57822）
• 无POCNext.js Middleware SSRF漏洞(CVE-2025-57822)
• 无POCNext.js X-Middleware-Subrequest 权限绕过漏洞（CVE-2025-29927）
• POCCVE-2025-29927-HEADLESS: Next.js Middleware Authorization Bypass
• POCCVE-2018-6184: Zeit Next.js <4.2.3 - Local File Inclusion
• POCCVE-2020-5284: Next.js <9.3.2 - Local File Inclusion
• POCCVE-2024-34351: Next.js - Server Side Request Forgery (SSRF)
• POCCVE-2025-29927: Next.js Middleware Bypass
• POCCVE-2025-57822: Next.js Middleware - Server-Side Request Forgery
• POCCVE-2025-29927-HEADLESS: Next.js Middleware Authorization Bypass
• POCCVE-2018-6184: Zeit Next.js <4.2.3 - Local File Inclusion
• POCCVE-2020-5284: Next.js <9.3.2 - Local File Inclusion
• POCCVE-2024-34351: Next.js - Server Side Request Forgery (SSRF)