Matt Kapko / CyberScoop:

Researchers say a Next.js flaw that existed for several years could have let hackers bypass middleware-based authentication; Vercel patched the flaw on March 18  —  The software defect in the widely used open-source JavaScript framework allows attackers to bypass middleware-based authorization.

Matt Kapko / CyberScoop:

Researchers say a Next.js flaw that existed for several years could have let hackers bypass middleware-based authentication; Vercel patched the flaw on March 18  —  The software defect in the widely used open-source JavaScript framework allows attackers to bypass middleware-based authorization.

Source: TechMeme
Source Link: http://www.techmeme.com/250324/p26#a250324p26