Maximum-severity vulnerability threatens 6% of all websites

⁨23⁩ ⁨likes⁩

Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨BrikoX@lemmy.zip⁩ to ⁨technology@lemmy.zip⁩

https://arstechnica.com/security/2025/12/admins-and-defenders-gird-themselves-against-maximum-severity-server-vulnerability/

Open source React executes malicious code with malformed HTML—no authentication needed.

Comments

Sort:hotnew top

gravitas_deficiency@sh.itjust.works ⁨1⁩ ⁨week⁩ ago
TL;DR:

Arbitrary code execution with no auth required at all.

Image

source