CVE-2025-43865 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the re…
High CVSS: 8.2

CVE-2025-43865

React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values ​​of the data object passed to the HTML. This issue has been patched in version 7.5.2.
Vendor
-
Product
-
CWE
CWE-345
Yayın Tarihi
2025-04-25 01:15:43
Güncelleme
2025-04-29 13:52:28
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-345 HIGH 2025

Referanslar

https://github.com/remix-run/react-router/blob/e6c53a0130559b4a9bd47f9cf76ea5b08a69868a/packages/react-router/lib/server-runtime/routes.ts#L87 https://github.com/remix-run/react-router/commit/c84302972a152d851cf5dd859ff332b354b70111 https://github.com/remix-run/react-router/security/advisories/GHSA-cpj6-fhp6-mr6j