Lucene search

Unexpected server crash in Next.js.

🗓️ 07 Dec 2021 21:09:12Reported by GitHub Advisory DatabaseType

Unexpected server crash in Next.js versions prior to 12.0.5 or 11.1.3 due to invalid URL

Reporter	Title	Published	Views	Family All 10
OSV	CVE-2021-43803	10 Dec 202100:15	–	osv
OSV	Unexpected server crash in Next.js.	7 Dec 202121:12	–	osv
CVE	CVE-2021-43803	10 Dec 202100:15	–	cve
Prion	Code injection	10 Dec 202100:15	–	prion
Veracode	Denial Of Service	8 Dec 202106:30	–	veracode
NVD	CVE-2021-43803	10 Dec 202100:15	–	nvd
Cvelist	CVE-2021-43803 Unexpected server crash in Next.js	9 Dec 202123:50	–	cvelist
AlpineLinux	CVE-2021-43803	10 Dec 202100:15	–	alpinelinux
IBM Security Bulletins	Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities	31 Aug 202310:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	16 Jun 202315:20	–	ibm

Vulners

Node

-nextRange0.9.9–11.1.3

-nextRange12.0.0–12.0.5

Source	Link
github	www.github.com/vercel/next.js/security/advisories/GHSA-25mp-g6fv-mqxx
github	www.github.com/vercel/next.js/pull/32080
github	www.github.com/vercel/next.js/commit/6d98b4fb4315dec1badecf0e9bdc212a4272b264
github	www.github.com/vercel/next.js/releases/v12.0.5
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-43803
github	www.github.com/vercel/next.js/releases/tag/v11.1.3
github	www.github.com/advisories/GHSA-25mp-g6fv-mqxx

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Dec 2021 21:12Current

7.5High risk

Vulners AI Score7.5

CVSS24.3

CVSS37.5

EPSS0.003

CWE-20