Burp Suite Enhances Scanner for React2Shell Vulnerabilities

First seen 9 Dec 2025, 13:53 UTC • Blog.Portswigger

•51

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Burp Suite has upgraded its scanning capabilities to detect critical React2Shell vulnerabilities in JavaScript applications. Both editions of Burp Suite now include the latest detection logic, allowing users to validate their exposure and perform automated scans effectively.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Attack Flow

10 entities, 15 inferred relationships (STIX 2.1).

Technique (3)

Data Breach
Malware
Zero-day Exploit

Vulnerability (3)

CVE-2025-55182
CVE-2025-66478
Log4j

Malware (1)

React2Shell

Affected Platform (1)

React

Tool (2)

Burp Suite
Bambda

Relationships

React2Shell exploits CVE-2025-55182
React2Shell exploits CVE-2025-66478
React2Shell exploits Log4j
Burp Suite exploits CVE-2025-55182
Burp Suite exploits CVE-2025-66478
Burp Suite exploits Log4j
Bambda exploits CVE-2025-55182
Bambda exploits CVE-2025-66478
Bambda exploits Log4j
CVE-2025-55182 targets React
CVE-2025-66478 targets React
Log4j targets React
Data Breach targets React
Malware targets React
Zero-day Exploit targets React

Continue Reading

Critical React2Shell RCE Vulnerability Exploited in the Wild RondoDox Botnet Targets React2Shell Flaw to Spread Malware Critical NGINX UI Vulnerability CVE-2026-33032 Under Active Exploitation AWS Warns of Data Exfiltration Risks from Outbound Traffic Blind Spots ChocoPoC Malware Targets Cybersecurity Researchers via Trojanized GitHub Exploits Rapid Exploitation of Vulnerabilities in 2025: Insights from Cisco Talos

Burp Suite Enhances Scanner for React2Shell Vulnerabilities

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading