CVE-2025-23027: BASEHUB_TOKEN commited in next-forge

Published Jan 13, 2025

Updated

next-forge is a Next.js project boilerplate for modern web application. The BASEHUBTOKEN commited in apps/web/.env.example. Users should avoid use of this token and should remove any access it may have in their systems.

Affected Software

1 affected component

Next.js next-forge

Event History

Jan 13, 2025

CVE Published

via MITRE·07:41 PM

Data Sourced

via MITRE·07:41 PM

DescriptionWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-23027?

CVE-2025-23027 is considered a high-severity vulnerability due to the exposure of sensitive tokens.

How do I fix CVE-2025-23027?

To fix CVE-2025-23027, remove the BASEHUB_TOKEN from the apps/web/.env.example and ensure it's not used in your environment.

What vulnerabilities does CVE-2025-23027 address?

CVE-2025-23027 addresses the potential misuse of a hardcoded sensitive token that may grant unauthorized access.

Who is affected by CVE-2025-23027?

Developers using the next-forge Next.js boilerplate should be aware of CVE-2025-23027 and take corrective actions.

Where can I find more information on CVE-2025-23027?

For more information on CVE-2025-23027, refer to the latest security advisories on the GitHub repository for next-forge.