VDB
CNVD-2025-29923
CNVD-2025-29923
PUBLISHED
Next.js是一个用于构建全栈Web应用程序的React框架。 ZEIT Next.js存在远程代码执行漏洞，该漏洞源于Next.js 15.x和16.x版本在使用App Router时，依赖了存在缺陷的React服务端DOM包，攻击者可利用该漏洞注入恶意代码远程执行命令。
Timeline
- Jun 24, 2024 PoC Published
- Dec 3, 2025 CVE Published
- Dec 3, 2025 PoC Published
- Dec 3, 2025 PoC Published
- Dec 3, 2025 PoC Published
- Dec 3, 2025 PoC Published
- Dec 3, 2025 PoC Published
- Dec 3, 2025 PoC Published
- Dec 3, 2025 PoC Published
- Dec 3, 2025 PoC Published
- Dec 3, 2025 PoC Published
- Dec 3, 2025 PoC Published