A critical Server-Side Request Forgery (SSRF) vulnerability has been discovered in the @opennextjs/cloudflare package, posing a significant security threat to websites deployed using the Cloudflare adapter for Open Next. The flaw, now tracked as CVE-2025-6087, allows unauthenticated attackers to proxy arbitrary remote content through the vulnerable site’s domain, posing significant risks of phishing, data exposure, […]

The post Open Next SSRF Flaw in Cloudflare Lets Hackers Fetch Data from Any Host appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

Source: gbHackers
Source Link: https://gbhackers.com/open-next-ssrf-flaw-in-cloudflare/