Minting Next.js Authentication Cookies
Brief
In this post, we’ll look how an adversary can mint authentication cookies for Next. js ( next-auth/Auth. js ) applications to maintain persistent access to the application as any user.
The reason this is important is because of React2Shell , which is a deserialization vulnerability that allows an adversary to run arbitrary code. Much has been discussed about this vulnerability, and you can read up the original details from the finder here .