サイバーセキュリティ

GMOサイバーセキュリティ、React.jsの重要脆弱性「React2Shell」を検知するASMツールを迅速にアップデートし、日本のサイバー防御を強化

GMO Cybersecurity by Ierae Inc., part of the GMO Internet Group, has released an urgent update to its Attack Surface Management (ASM) platform, known as 'GMO Cyber Attack Net de Shindan ASM', to enable detection of a newly disclosed, extremely severe vulnerability in the widely used JavaScript framework React.js, referred to as React2Shell (CVE-2025-55182). The vulnerability, already observed being exploited in real-world attacks, carries a CVSS score of 10.0, the highest possible severity level. This rapid response underscores how critical vulnerability awareness and management have become for software development and enterprise security operations. The updated ASM tool enables organizations to automatically identify whether their externally exposed IT assets are using vulnerable versions of React.js and provides timely notification to accelerate remediation actions. In an era when React.js underpins countless enterprise…