Minting Next.js Authentication Cookies
In this post, we’ll look how an adversary can mint authentication cookies for Next.js ( next-auth/Auth.js ) applications to maintain persistent access to the application as any user. The reason this is important is because of React2Shell , which is a deserialization vulnerability that allows an adversary to run arbitrary code.
Summary from Embrace The Red.
Explained
The technology and terms in this story. Learn more
