AWS waf high security documentation change
Summary
Added new ReactJSRCE_BODY rule to detect CVE-2025-55182 vulnerability patterns in request bodies
Security assessment
The change introduces detection for a specific CVE (CVE-2025-55182) related to React/Next.js remote code execution. This directly addresses a security vulnerability by adding a blocking rule to mitigate it.
Diff
diff --git a/waf/latest/developerguide/aws-managed-rule-groups-baseline.md b/waf/latest/developerguide/aws-managed-rule-groups-baseline.md index b031d527f..4c46df884 100644 --- a//waf/latest/developerguide/aws-managed-rule-groups-baseline.md +++ b//waf/latest/developerguide/aws-managed-rule-groups-baseline.md @@ -152,0 +153,5 @@ This rule only inspects the request body up to the body size limit for the prote +`ReactJSRCE_BODY` | Inspects the request body for patterns indicating presence of CVE-2025-55182. + +###### Warning + +This rule only inspects the request body up to the body size limit for the protection pack (web ACL) and resource type. For Application Load Balancer and AWS AppSync, the limit is fixed at 8 KB. For CloudFront, API Gateway, Amazon Cognito, App Runner, and AWS Verified Access, the default limit is 16 KB and you can increase the limit up to 64 KB in your protection pack (web ACL) configuration. This rule uses the `CONTINUE` option for oversize content handling. For more information, see [Oversize web request components in AWS WAF](./waf-oversize-request-components.html). Rule action: Block Label: `awswaf:managed:aws:known-bad-inputs:ReactJSRCE_Body`