⤷ Title: “Better Auth” Framework Alert: The Double-Slash Trick That Bypasses Security Controls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:33:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #Better Auth #CVSS 8.6 #javascript #Path Normalization #Proxy Security #Rate Limit Evasion #rou3 #TypeScript #Web Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:33:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #Better Auth #CVSS 8.6 #javascript #Path Normalization #Proxy Security #Rate Limit Evasion #rou3 #TypeScript #Web Security
Daily CyberSecurity
"Better Auth" Framework Alert: The Double-Slash Trick That Bypasses Security Controls
A normalization flaw in Better Auth's router allows attackers to bypass access controls and rate limits using simple double-slash URLs.