Lỗ hổng React2Shell: Đánh giá ảnh hưởng từ góc nhìn của chuyên gia bảo mật CyStack
04/12/2025
Huy NguyễnHead of Security. Strategist. Defender. Building resilient defenses for the modern web.
Về tác giả
Huy NguyễnHead of Security. Strategist. Defender. Building resilient defenses for the modern web. Head of Security. Strategist. Defender. Building resilient defenses for the modern web.
Cập nhật thông tin mới nhấtNhận các thông tin mới nhất về mối đe dọa, báo cáo an ninh mạng từ CyStack về hòm thư điện tử của bạn
{"success":true,"head":"<title>Lỗ hổng React2Shell: Đánh giá ảnh hưởng từ góc nhìn của chuyên gia bảo mật CyStack - CyStack Blog</title>\n<meta name=\"description\" content=\"Ngày 3/12, React cảnh báo lỗ hổng React2Shell (CVE‑2025‑55182) điểm CVSS 10.0. Kẻ tấn công có thể RCE trên mọi app bật RSC ngay cả khi không dùng server function\"/>\n<meta name=\"robots\" content=\"noindex, nofollow\"/>\n<meta property=\"og:locale\" content=\"en_US\" />\n<meta property=\"og:type\" content=\"article\" />\n<meta property=\"og:title\" content=\"Lỗ hổng React2Shell: Đánh giá ảnh hưởng từ góc nhìn của chuyên gia bảo mật CyStack - CyStack Blog\" />\n<meta property=\"og:description\" content=\"Ngày 3/12, React cảnh báo lỗ hổng React2Shell (CVE‑2025‑55182) điểm CVSS 10.0. Kẻ tấn công có thể RCE trên mọi app bật RSC ngay cả khi không dùng server function\" />\n<meta property=\"og:url\" content=\"https://blog.cystack.org/vi/blog/2025/12/04/lo-hong-react2shell/\" />\n<meta property=\"og:site_name\" content=\"CyStack Blog\" />\n<meta property=\"article:tag\" content=\"vi\" />\n<meta property=\"article:section\" content=\"An toàn vận hành\" />\n<meta property=\"og:updated_time\" content=\"2026-06-23T19:59:38+07:00\" />\n<meta property=\"og:image\" content=\"https://s.locker.io/resources/04203113/6.png\" />\n<meta property=\"og:image:secure_url\" content=\"https://s.locker.io/resources/04203113/6.png\" />\n<meta property=\"og:image:width\" content=\"1200\" />\n<meta property=\"og:image:height\" content=\"630\" />\n<meta property=\"og:image:alt\" content=\"React2Shell\" />\n<meta property=\"og:image:type\" content=\"image/jpeg\" />\n<meta property=\"article:published_time\" content=\"2025-12-04T21:43:38+07:00\" />\n<meta property=\"article:modified_time\" content=\"2026-06-23T19:59:38+07:00\" />\n<meta name=\"twitter:card\" content=\"summary_large_image\" />\n<meta name=\"twitter:title\" content=\"Lỗ hổng React2Shell: Đánh giá ảnh hưởng từ góc nhìn của chuyên gia bảo mật CyStack - CyStack Blog\" />\n<meta name=\"twitter:description\" content=\"Ngày 3/12, React cảnh báo lỗ hổng React2Shell (CVE‑2025‑55182) điểm CVSS 10.0. Kẻ tấn công có thể RCE trên mọi app bật RSC ngay cả khi không dùng server function\" />\n<meta name=\"twitter:image\" content=\"https://s.locker.io/resources/04203113/6.png\" />\n<meta name=\"twitter:label1\" content=\"Written by\" />\n<meta name=\"twitter:data1\" content=\"Huy Nguyễn\" />\n<meta name=\"twitter:label2\" content=\"Time to read\" />\n<meta name=\"twitter:data2\" content=\"6 minutes\" />\n<script type=\"application/ld+json\" class=\"rank-math-schema\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://blog.cystack.org/#organization\",\"name\":\"CyStack\",\"url\":\"https://blog.cystack.org\"},{\"@type\":\"WebSite\",\"@id\":\"https://blog.cystack.org/#website\",\"url\":\"https://blog.cystack.org\",\"name\":\"CyStack\",\"publisher\":{\"@id\":\"https://blog.cystack.org/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"@id\":\"https://s.locker.io/resources/04203113/6.png\",\"url\":\"https://s.locker.io/resources/04203113/6.png\",\"width\":\"1200\",\"height\":\"630\",\"inLanguage\":\"en-US\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://blog.cystack.org/vi/blog/2025/12/04/lo-hong-react2shell/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":\"1\",\"item\":{\"@id\":\"https://blog.cystack.org\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"position\":\"2\",\"item\":{\"@id\":\"https://blog.cystack.org/vi/blog/2025/12/04/lo-hong-react2shell/\",\"name\":\"L\\u1ed7 h\\u1ed5ng React2Shell: \\u0110\\u00e1nh gi\\u00e1 \\u1ea3nh h\\u01b0\\u1edfng t\\u1eeb g\\u00f3c nh\\u00ecn c\\u1ee7a chuy\\u00ean gia b\\u1ea3o m\\u1eadt CyStack\"}}]},{\"@type\":\"WebPage\",\"@id\":\"https://blog.cystack.org/vi/blog/2025/12/04/lo-hong-react2shell/#webpage\",\"url\":\"https://blog.cystack.org/vi/blog/2025/12/04/lo-hong-react2shell/\",\"name\":\"L\\u1ed7 h\\u1ed5ng React2Shell: \\u0110\\u00e1nh gi\\u00e1 \\u1ea3nh h\\u01b0\\u1edfng t\\u1eeb g\\u00f3c nh\\u00ecn c\\u1ee7a chuy\\u00ean gia b\\u1ea3o m\\u1eadt CyStack - CyStack Blog\",\"datePublished\":\"2025-12-04T21:43:38+07:00\",\"dateModified\":\"2026-06-23T19:59:38+07:00\",\"isPartOf\":{\"@id\":\"https://blog.cystack.org/#website\"},\"primaryImageOfPage\":{\"@id\":\"https://s.locker.io/resources/04203113/6.png\"},\"inLanguage\":\"en-US\",\"breadcrumb\":{\"@id\":\"https://blog.cystack.org/vi/blog/2025/12/04/lo-hong-react2shell/#breadcrumb\"}},{\"@type\":\"Person\",\"@id\":\"https://blog.cystack.org/author/huynv/\",\"name\":\"Huy Nguy\\u1ec5n\",\"url\":\"https://blog.cystack.org/author/huynv/\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https://secure.gravatar.com/avatar/d00caeca6c0c65dcd57164913742a68dbf5aa152fdfbbb73711a8aede10af0f0?s=96&d=mm&r=g\",\"url\":\"https://secure.gravatar.com/avatar/d00caeca6c0c65dcd57164913742a68dbf5aa152fdfbbb73711a8aede10af0f0?s=96&d=mm&r=g\",\"caption\":\"Huy Nguy\\u1ec5n\",\"inLanguage\":\"en-US\"},\"worksFor\":{\"@id\":\"https://blog.cystack.org/#organization\"}},{\"@type\":\"BlogPosting\",\"headline\":\"L\\u1ed7 h\\u1ed5ng React2Shell: \\u0110\\u00e1nh gi\\u00e1 \\u1ea3nh h\\u01b0\\u1edfng t\\u1eeb g\\u00f3c nh\\u00ecn c\\u1ee7a chuy\\u00ean gia b\\u1ea3o m\\u1eadt CyStack - CyStack Blog\",\"keywords\":\"React2Shell,CVE\\u20112025\\u201155182,react\",\"datePublished\":\"2025-12-04T21:43:38+07:00\",\"dateModified\":\"2026-06-23T19:59:38+07:00\",\"author\":{\"@id\":\"https://blog.cystack.org/author/huynv/\",\"name\":\"Huy Nguy\\u1ec5n\"},\"publisher\":{\"@id\":\"https://blog.cystack.org/#organization\"},\"description\":\"Ng\\u00e0y 3/12, React c\\u1ea3nh b\\u00e1o l\\u1ed7 h\\u1ed5ng React2Shell (CVE\\u20112025\\u201155182) \\u0111i\\u1ec3m CVSS 10.0. K\\u1ebb t\\u1ea5n c\\u00f4ng c\\u00f3 th\\u1ec3 RCE tr\\u00ean m\\u1ecdi app b\\u1eadt RSC ngay c\\u1ea3 khi kh\\u00f4ng d\\u00f9ng server function\",\"name\":\"L\\u1ed7 h\\u1ed5ng React2Shell: \\u0110\\u00e1nh gi\\u00e1 \\u1ea3nh h\\u01b0\\u1edfng t\\u1eeb g\\u00f3c nh\\u00ecn c\\u1ee7a chuy\\u00ean gia b\\u1ea3o m\\u1eadt CyStack - CyStack Blog\",\"@id\":\"https://blog.cystack.org/vi/blog/2025/12/04/lo-hong-react2shell/#richSnippet\",\"isPartOf\":{\"@id\":\"https://blog.cystack.org/vi/blog/2025/12/04/lo-hong-react2shell/#webpage\"},\"image\":{\"@id\":\"https://s.locker.io/resources/04203113/6.png\"},\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https://blog.cystack.org/vi/blog/2025/12/04/lo-hong-react2shell/#webpage\"}}]}</script>\n"}
