Lucene search
China National Vulnerability DatabaseCNVD-2021-69953HistorySep 01, 2021 - 12:00 a.m.
ZEIT Next.js Cross-Site Scripting Vulnerability
2021-09-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
0.001 Low
EPSS
Percentile
29.4%
ZEIT Next.js is an open source web application framework from ZEIT based on Vue.js, Node.js, Webpack and Babel.js. Next.js versions 10.0.0 to 11.0.0 have a cross-site scripting vulnerability that can be exploited by attackers to execute arbitrary js commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zeit next.js >=10.0.0， | le | 11.0.0 |
Related
cve
cve
CVE-2021-39178
2021-08-31 00:15:07
osv
osv
CVE-2021-39178
2021-08-31 00:15:07
XSS in Image Optimization API for Next.js
2021-09-01 18:24:22
github
github
XSS in Image Optimization API for Next.js
2021-09-01 18:24:22
prion
prion
Cross site scripting
2021-08-31 00:15:00
veracode
veracode
Cross-site Scripting (XSS)
2021-09-01 10:00:16
nvd
nvd
CVE-2021-39178
2021-08-31 00:15:07
cvelist
cvelist
ibm
ibm