SecurityPortSwigger Research7 months ago
How to detect React2Shell with Burp Suite
1 min read
Two critical React2Shell vulnerabilities (CVE-2025-55182 and CVE-2025-66478) carry a CVSS score of 10.0 and enable unauthenticated remote code execution. Default scans in both versions of Burp Suite now detect React2Shell in Next.js applications out of the box with no extensions required.
Level
Hype check
Tap to vote and see what everyone thinks.