CVE-2024-46982-Reproduction

🗓️ 27 Aug 2026 21:14:09Reported by KitPloitType

kitploit🔗 kitploit.com👁 3 Views

Stored XSS via cache poisoning in Next.js when User-Agent header is included in cached output.

Reporter	Title	Published	Views	Family All 28
GithubExploit	Exploit for CVE-2024-46982	23 Jan 202503:38	–	githubexploit
GithubExploit	Exploit for Race Condition in Vercel Next.Js	11 Oct 202507:24	–	githubexploit
GithubExploit	Exploit for Authorization Bypass Through User-Controlled Key in Vercel Next.Js	6 Dec 202507:11	–	githubexploit
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	8 Nov 202408:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Pre-Validation App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	20 Nov 202415:23	–	ibm
BDU FSTEC	The vulnerability of the Next.js software platform for creating web applications lies in its ability to bypass authentication by using a user-controlled key. This allows attackers to disclose sensitive information that should be protected.	4 Oct 202400:00	–	bdu_fstec
Chainguard	CVE-2024-46982 vulnerabilities	17 Sep 202422:15	–	cgr
Circl	CVE-2024-46982	18 Sep 202400:49	–	circl
CNNVD	Next.js 安全漏洞	17 Sep 202400:00	–	cnnvd
CVE	CVE-2024-46982	17 Sep 202421:55	–	cve

27 Aug 2026 21:14Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

EPSS0.5918

SSVC

Next.js Stored XSS Cache Poisoning User-Agent header HTTP response