ํ•œ๊ตญ์ธํ„ฐ๋„ท์ง„ํฅ์› C-TAS์—์„œ ๋ณด์•ˆ๊ถŒ๊ณ  ์š”์ฒญํ•ฉ๋‹ˆ๋‹ค.


โ–ก ๊ฐœ์š”

ย o React์˜ ์„œ๋ฒ„ ์ปดํฌ๋„ŒํŠธ ์ทจ์•ฝ์ ์„ ํ•ด๊ฒฐํ•œ ๋ณด์•ˆ ์—…๋ฐ์ดํŠธ ๋ฐœํ‘œ

ย o ์˜ํ–ฅ๋ฐ›๋Š” ๋ฒ„์ „์„ ์‚ฌ์šฉ ์ค‘์ธ ์‚ฌ์šฉ์ž๋Š” ํ•ด๊ฒฐ ๋ฐฉ์•ˆ์— ๋”ฐ๋ผ ์ตœ์‹  ๋ฒ„์ „์œผ๋กœ ์—…๋ฐ์ดํŠธ ๊ถŒ๊ณ 


โ–ก ์„ค๋ช…

o React Server Components(RSC)์—์„œ ์‚ฌ์ „ ์ธ์ฆ ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰(RCE) ์ทจ์•ฝ์ (CVE-2025-55182) ๊ณต


โ–ก ์˜ํ–ฅ๋ฐ›๋Š” ์ œํ’ˆ ๋ฐ ํ•ด๊ฒฐ ๋ฐฉ์•ˆ

o react-server-dom-webpack: 19.0, 19.1.0~19.1.1, 19.2.0 ๋ฒ„์ „ ์˜ํ–ฅ / ํ•ด๊ฒฐ ๋ฒ„์ „: 19.0.1, 19.1.2, 19.2.1

o react-server-dom-parcel: ๋™์ผ ์˜ํ–ฅ ๋ฒ„์ „ ๋ฐ ๋™์ผ ํ•ด๊ฒฐ ๋ฒ„์ „ ์ ์šฉ ํ•„์š”

o react-server-dom-turbopack: ๋™์ผ ์˜ํ–ฅ ๋ฒ„์ „ ๋ฐ ๋™์ผ ํ•ด๊ฒฐ ๋ฒ„์ „ ์ ์šฉ ํ•„์š”

o Next.js: 14.3.0-canary.77 ์ด์ƒ, 15.x~16.x ์ผ๋ถ€ ๋ฒ„์ „ ์˜ํ–ฅ / ์ตœ์‹  ์•ˆ์ • ๋ฒ„์ „(14.x) ์ ์šฉ ๊ถŒ๊ณ 


โ–ก ์ฐธ๊ณ ์‚ฌ์ดํŠธ

https://www.boho.or.kr/kr/bbs/view.do?bbsId=B0000133&pageIndex=1&nttId=71912&menuNo=205020


์นจํ•ด์‚ฌ๊ณ  ์‹ ๊ณ  : ํ•œ๊ตญ์ธํ„ฐ๋„ท์ง„ํฅ์› ์ธํ„ฐ๋„ท์นจํ•ด๋Œ€์‘์„ผํ„ฐ ์ข…ํ•ฉ์ƒํ™ฉ์‹ค(02-405-4911~5, certgen@krcert.or.kr)






๋ฆฌ์•กํŠธ์—์„œ ๋ณด์•ˆ ์ทจ์•ฝ์  ๋ฐœ์ƒ -> ๋ณด์•ˆ ํŒจ์น˜ ์ง„ํ–‰์ค‘ ๋ชฐ?๋ฃจ ํ•˜๊ณ  ์ผ๋ถ€ ๋กœ๊ทธ ๊ธฐ๋ก ์‹œ์Šคํ…œ์„ ๊บผ๋ฒ„๋ฆผ -> ๊ฑฐ๊ธฐ์— ์˜์กดํ•˜๋Š” ์‹œ์Šคํ…œ ์—๋Ÿฌ -> ํŽ‘