Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How to detect React2Shell with Burp Suite

portswigger.net | blog | #rce | #appsec | #burp-suite | #detection | #react2shell | #nextjs | #cve-2025-55182 | #cve-2025-66478

Summary

Burp Suite's default scans now detect React2Shell (CVE-2025-55182 and CVE-2025-66478), two critical unauthenticated RCE flaws in React server components affecting Next.js applications.
Published
Collected

original ↗

Related coverage

  1. CVE-2025-55182 and CVE-2025-66478 (“React2Shell”): All you need to know – UPDATED (jfrog.com)
  2. React2Shell (CVE-2025-55182): A Wake-Up Call for Modern Web Security and How XBOW Helps You Respond (xbow.com)
  3. React & Next.js DoS Vulnerability (CVE-2025-55184): What You Need to Fix After React2Shell (aikido.dev)
  4. Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert (wiz.io)
  5. React2Shell (CVE-2025-55182): Node.js RCE Against a Production Next.js App (hunt.io)
  6. How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)

back