zlacker

[return to "RCE Vulnerability in React and Next.js"]
1. _el1s7+rL[view] [source] 2025-12-03 19:38:38
>>rayhaa+(OP)
Next.js/RSC has become the new PHP :)

I guess now we'll see more bots scanning websites for "/_next" path rather than "/wp-content".

◧◩
2. Vinnl+TF2[view] [source] 2025-12-04 11:20:39
>>_el1s7+rL
I have seen a number of attempts at exploiting this on our deployment already. Luckily I saw and was able to apply the patch last night, but as a European, it wasn't great to only get the announcement after dinner time.
[go to top]