CVE-2020-5284

Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access files in the dist directory .next. This does not affect files outside of the dist directory .next. In general, the dist directory only holds build assets unless your applicatio...

Directory traversal

Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access files in the dist directory .next. This does not affect files outside of the dist directory .next. In general, the dist directory only holds build assets unless your applicatio...

Directory Traversal in Next.js

Impact - Not affected: Deployments on ZEIT Now v2 https://zeit.co are not affected - Not affected: Deployments using the serverless target - Not affected: Deployments using next export - Affected: Users of Next.js below 9.3.2 We recommend everyone to upgrade regardless of whether you can reproduc...

CVE-2020-5284 Directory Traversal in Next.js versions below 9.3.2

Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access files in the dist directory .next. This does not affect files outside of the dist directory .next. In general, the dist directory only holds build assets unless your applicatio...

CVE-2020-5284

Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access files in the dist directory .next. This does not affect files outside of the dist directory .next. In general, the dist directory only holds build assets unless your applicatio...

CVE-2020-5284

Next.js versions before 9.3.2 are vulnerable to a local file traversal in the dist directory (.next). Attackers can craft HTTP requests to access files within dist/.next, potentially leading to information disclosure. The issue does not affect files outside dist/.next. A fix is available in Next....

PT-2020-18374

Name of the Vulnerable Software and Affected Versions Next.js versions prior to 9.3.2 Description The issue allows attackers to craft special requests to access files in the dist directory .next due to a directory traversal vulnerability. This vulnerability does not affect files outside of the di...

CVE-2020-5284

Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access files in the dist directory .next. This does not affect files outside of the dist directory .next. In general, the dist directory only holds build assets unless your applicatio...

CVE-2020-5284: Relative Path Traversal

Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access files in the dist directory .next. This does not affect files outside of the dist directory .next. In general, the dist directory only holds build assets unless your applicatio...

Next.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error page

Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /error page...

CVE-2018-18282

Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /error page...

Cross site scripting

Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /error page...

CVE-2018-18282

Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /error page...

CVE-2018-18282

Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /error page...

CVE-2018-18282

Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /error page...

CVE-2018-18282

CVE-2018-18282 affects Next.js 7.0.0 and 7.0.1, introducing a cross-site scripting (XSS) vulnerability on the 404/500 pages via the /_error handler. The issue originates from how the pathname is sanitized, enabling a remote attacker to execute client-side code through crafted requests. A fix is a...

CVE-2018-18282: Improper Neutralization of Input During Web Page Generation

Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /error page...

PT-2018-14391

Name of the Vulnerable Software and Affected Versions Next.js versions 7.0.0 through 7.0.1 Description The issue is related to a cross-site scripting XSS problem. It affects the 404 or 500 / error page. Recommendations For versions 7.0.0 and 7.0.1, update to a version that fixes this issue to...

ZEIT Next.js Directory Traversal Vulnerability (CNVD-2018-03103)

ZEIT Next.js is an open source general-purpose webapps development framework . A directory traversal vulnerability exists in ZEIT Next.js version 4 prior to 4.2.3. An attacker can exploit this vulnerability to access front-end JavaScript components or possibly obtain sensitive data...

@bani2812/teasilent (1.1.4), @cetiak/tea-open-source1 (1.0.1) +60 more potentially affected by CVE-2018-6184 via next (>=1.2.3, <=4.2.1)

next NPM version =1.2.3, =0.0.1, =1.0.0, =1.0.0, =1.0.5, =0.3.0, =0.1.8, =0.1.0, =1.0.2, =1.3.21, =0.0.80, =1.0.0, =1.1.0 and more Source cves: CVE-2018-6184 Source advisory: OSV:GHSA-M34X-WGRH-G897...