{"id":16400,"date":"2025-12-08T15:16:40","date_gmt":"2025-12-08T06:16:40","guid":{"rendered":"https:\/\/sparrow.im\/kr\/?post_type=announcement&p=16400"},"modified":"2025-12-11T14:37:25","modified_gmt":"2025-12-11T05:37:25","slug":"react-server-components-%ec%9b%90%ea%b2%a9-%ec%bd%94%eb%93%9c-%ec%8b%a4%ed%96%89rce-%ec%b7%a8%ec%95%bd%ec%a0%90-%ea%b4%80%eb%a0%a8-%ea%b3%b5%ec%a7%80cve-2025-55182","status":"publish","type":"announcement","link":"https:\/\/sparrow.im\/kr\/info\/notice\/view\/20251208\/react-server-components-%EC%9B%90%EA%B2%A9-%EC%BD%94%EB%93%9C-%EC%8B%A4%ED%96%89rce-%EC%B7%A8%EC%95%BD%EC%A0%90-%EA%B4%80%EB%A0%A8-%EA%B3%B5%EC%A7%80cve-2025-55182\/","title":{"rendered":"React Server Components \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589(RCE) \ucde8\uc57d\uc810 \uad00\ub828 \uc548\ub0b4(CVE-2025-55182)"},"content":{"rendered":"
\n

\uc548\ub155\ud558\uc138\uc694. \uc2a4\ud328\ub85c\uc6b0\uc785\ub2c8\ub2e4.<\/p>\n

 <\/p>\n

\ucd5c\uadfc React Server Components \ud658\uacbd\uc5d0\uc11c \uc778\uc99d\ub418\uc9c0 \uc54a\uc740 \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589(Remote Code Execution, RCE)\uc774 \uac00\ub2a5\ud55c \ubcf4\uc548 \ucde8\uc57d\uc810 CVE-2025-55182\uac00 \uacf5\uac1c\ub418\uc5c8\uc2b5\ub2c8\ub2e4.
\n\ud574\ub2f9 \ucde8\uc57d\uc810\uc740 CVSS 10.0\uc758 \ucd5c\uace0 \ub4f1\uae09\uc73c\ub85c \ud3c9\uac00\ub418\uc5c8\uc73c\uba70 \ub2e4\uc591\ud55c \uac1c\ubc1c \ud504\ub808\uc784\uc6cc\ud06c \ubc0f \uc11c\ube44\uc2a4 \ud658\uacbd\uc5d0\uc11c \uc545\uc6a9\uc774 \uac00\ub2a5\ud574 \uc989\uac01\uc801\uc778 \uc870\uce58\uac00 \ud544\uc694\ud569\ub2c8\ub2e4.<\/p>\n

 <\/p>\n

\u25a0 \uac1c\uc694
\n– CVE ID: CVE-2025-55182
\n– \uc601\ud5a5 \uc218\uc900: Critical(CVSS 10.0)
\n– \uc601\ud5a5 \ubc94\uc704 \ubc0f \ud574\uacb0 \ubc84\uc804<\/p>\n<\/div>\n

\u00a0 \u00a0<\/span><\/div>\n
\u00a0 \u00a0 (* \ucc38\uace0 \uc0ac\uc774\ud2b8 : React \uc11c\ubc84 \ucef4\ud3ec\ub10c\ud2b8 \ubcf4\uc548 \uc5c5\ub370\uc774\ud2b8 \uad8c\uace0<\/a>,\u00a0NVD – CVE-2025-55182<\/a>)<\/span><\/div>\n
\n

 <\/p>\n

\u25a0 \uc870\uce58 \ubc29\uc548
\n– \ud504\ub85c\uc81d\ud2b8 \uc810\uac80
\n:\u00a0 React, Next.js \ubc84\uc804 \ud655\uc778 \ubc0f \ucde8\uc57d \ubc84\uc804 \uc0ac\uc6a9 \uc5ec\ubd80 \uc810\uac80
\n– \ud328\uce58 \uc5c5\ub370\uc774\ud2b8(\uc0c1\uae30 \ud45c \ucc38\uace0)
\n: React\uc758 \uacbd\uc6b0, 19.01 \/ 19.1.2 \/ 19.2.1 \ubc84\uc804 \uc774\uc0c1\uc73c\ub85c \ucd5c\uc2e0 \uc5c5\ub370\uc774\ud2b8 \uc9c4\ud589
\n: Next.js\uc758 \uacbd\uc6b0, 15.05 \uc774\uc0c1 \ub610\ub294 16.07 \ubc84\uc804 \uc774\uc0c1\uc73c\ub85c \ucd5c\uc2e0 \uc5c5\ub370\uc774\ud2b8 \uc9c4\ud589<\/p>\n

 <\/p>\n

\ubcf8 \ucde8\uc57d\uc810\uc740 \uacf5\uac1c \uc9c1\ud6c4 \uc2e4\uc81c \uce68\ud574 \uc0ac\ub840\uac00 \ubcf4\uace0\ub420 \ub9cc\ud07c \ube60\ub974\uac8c \uc545\uc6a9\ub418\uace0 \uc788\uc5b4 \uc2e0\uc18d\ud55c \ud658\uacbd \uc810\uac80\uacfc \ud328\uce58 \uc801\uc6a9\uc774 \ud544\uc218\uc801\uc785\ub2c8\ub2e4.
\n\uc624\ud508\uc18c\uc2a4 \ubd84\uc11d \ubc0f \uad00\ub9ac \ub3c4\uad6c\uc778 Sparrow SCA\ub294 \uc989\uac01 \uc5c5\ub370\uc774\ud2b8\uac00 \uad8c\uace0\ub41c React \ubc0f Nest.js \ucde8\uc57d\uc810\uc744 \uc790\ub3d9 \ud0d0\uc9c0\ud569\ub2c8\ub2e4.
\n\uc2a4\ud328\ub85c\uc6b0\ub294 \uc774\ubc88 \ucde8\uc57d\uc810\uc73c\ub85c \uc778\ud55c \uadc0\uc0ac\uc758 \ud53c\ud574\ub97c \ucd5c\uc18c\ud654\ud558\uace0 \uc548\uc815\uc801 \uc11c\ube44\uc2a4 \uc6b4\uc601\uc744 \uc704\ud574 \uc801\uadf9 \uc9c0\uc6d0\ud558\uaca0\uc2b5\ub2c8\ub2e4.<\/p>\n

 <\/p>\n

\uad81\uae08\ud558\uc2e0 \uc810\uc740 \uc5b8\uc81c\ub4e0\uc9c0 \uace0\uac1d\uc13c\ud130\ub85c \ubb38\uc758 \uc8fc\uc2dc\uae30 \ubc14\ub78d\ub2c8\ub2e4.
\n(\ubb38\uc758) \uae30\uc220\/\uc7a5\uc560 02-6263-7411<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

\uc548\ub155\ud558\uc138\uc694. \uc2a4\ud328\ub85c\uc6b0\uc785\ub2c8\ub2e4.   \ucd5c\uadfc React Server Components \ud658\uacbd\uc5d0\uc11c \uc778\uc99d\ub418\uc9c0 \uc54a\uc740 \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589(Remote Code Execution, RCE)\uc774 \uac00\ub2a5\ud55c \ubcf4\uc548 \ucde8\uc57d\uc810 CVE-2025-55182\uac00 \uacf5\uac1c\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \ud574\ub2f9 \ucde8\uc57d\uc810\uc740 CVSS 10.0\uc758 \ucd5c\uace0 \ub4f1\uae09\uc73c\ub85c \ud3c9\uac00\ub418\uc5c8\uc73c\uba70 \ub2e4\uc591\ud55c \uac1c\ubc1c \ud504\ub808\uc784\uc6cc\ud06c \ubc0f \uc11c\ube44\uc2a4 \ud658\uacbd\uc5d0\uc11c \uc545\uc6a9\uc774 \uac00\ub2a5\ud574 \uc989\uac01\uc801\uc778 \uc870\uce58\uac00 \ud544\uc694\ud569\ub2c8\ub2e4.   \u25a0 \uac1c\uc694 – CVE ID: CVE-2025-55182 – \uc601\ud5a5 \uc218\uc900: Critical(CVSS 10.0) – \uc601\ud5a5 \ubc94\uc704 \ubc0f […]<\/p>\n","protected":false},"featured_media":0,"template":"","class_list":["post-16400","announcement","type-announcement","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/sparrow.im\/kr\/wp-json\/wp\/v2\/announcement\/16400","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sparrow.im\/kr\/wp-json\/wp\/v2\/announcement"}],"about":[{"href":"https:\/\/sparrow.im\/kr\/wp-json\/wp\/v2\/types\/announcement"}],"wp:attachment":[{"href":"https:\/\/sparrow.im\/kr\/wp-json\/wp\/v2\/media?parent=16400"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}