Skip to main content

Improper Handling of Exceptional Conditions

CVE-2025-43864

Severity High
Score 7.5/10

Summary

The package react-router is a routing library for React applications. In versions 7.2.x prior to 7.5.2, forcing an application into SPA mode was possible by adding a specific header to the request. If the application utilizes SSR and is coerced into SPA mode, this could lead to an error that completely disrupts the page. Furthermore, if a caching system is in place, this error response could be cached, resulting in cache poisoning that significantly impacts the application's availability.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-755 - Improper Handling of Exceptional Conditions

The software does not handle or incorrectly handles an exceptional condition.

Advisory Timeline

  • Published