Aller au contenu
8.2 Élevée

CVE-2025-43865 React Router is a router for React

Description

React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values ​​of the data object passed to the HTML. This issue has been patched in version 7.5.2.

Produits et versions touchés

Produit Versions touchées Corrigé en
react-router 7.0 7.0 → < 7.5.2 7.5.2

Références

Chronologie

  1. Publiée
  2. Dernière modification
Les 21 CVE de react-router →
Suivre cette CVE