Directory traversal vulnerability in Next.js

Next.js 4 before 4.2.3 has Directory Traversal under the /next request namespace...

GHSA-M34X-WGRH-G897 Directory traversal vulnerability in Next.js

Next.js 4 before 4.2.3 has Directory Traversal under the /next request namespace...

@bani2812/teasilent (1.1.4), @cetiak/tea-open-source1 (1.0.1) +60 more potentially affected by CVE-2018-6184 via next (>=1.2.3, <=4.2.1)

next NPM version =1.2.3, =0.0.1, =1.0.0, =1.0.0, =1.0.5, =0.3.0, =0.1.8, =0.1.0, =1.0.2, =1.3.21, =0.0.80, =1.0.0, =1.1.0 and more Source cves: CVE-2018-6184 Source advisory: GHSA-M34X-WGRH-G897...

CVE-2018-6184

ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /next request namespace...

CVE-2018-6184

ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /next request namespace...

Directory traversal

ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /next request namespace...

CVE-2018-6184

ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /next request namespace...

CVE-2018-6184

ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /next request namespace...

CVE-2018-6184

Zeit Next.js 4.x before 4.2.3 is vulnerable to a directory traversal via the /_next request namespace. The connected templates describe Local File Inclusion/LFI exposure, allowing an attacker to read sensitive files and potentially modify data or perform administrative actions within the affected...

CVE-2018-6184: Improper Limitation of a Pathname to a Restricted Directory

ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /next request namespace...

PT-2018-17392

Name of the Vulnerable Software and Affected Versions Next.js versions prior to 4.2.3 Description The issue concerns a Directory Traversal vulnerability under the "/ next" request namespace. This allows for potential unauthorized access to sensitive files and directories. Recommendations For...

Next.js Directory Traversal Vulnerability

Next.js before 2.4.1 has directory traversal under the /next and /static request namespace, allowing attackers to obtain sensitive information...

GHSA-3F5C-4QXJ-VMPF Next.js Directory Traversal Vulnerability

Next.js before 2.4.1 has directory traversal under the /next and /static request namespace, allowing attackers to obtain sensitive information...

CVE-2017-16877

ZEIT Next.js before 2.4.1 has directory traversal under the /next and /static request namespace, allowing attackers to obtain sensitive information...

Directory traversal

ZEIT Next.js before 2.4.1 has directory traversal under the /next and /static request namespace, allowing attackers to obtain sensitive information...

CVE-2017-16877

ZEIT Next.js before 2.4.1 has directory traversal under the /next and /static request namespace, allowing attackers to obtain sensitive information...

CVE-2017-16877

ZEIT Next.js before 2.4.1 has directory traversal under the /next and /static request namespace, allowing attackers to obtain sensitive information...

CVE-2017-16877

CVE-2017-16877 affects ZEIT/Next.js versions prior to 2.4.1. Multiple connected sources describe a directory traversal flaw in the "/_next" and "/static" namespaces that can allow an attacker to obtain sensitive information from the server. The issue is categorized with high severity in several f...

CVE-2017-16877

ZEIT Next.js before 2.4.1 has directory traversal under the /next and /static request namespace, allowing attackers to obtain sensitive information...

CVE-2017-16877: Improper Limitation of a Pathname to a Restricted Directory

ZEIT Next.js before 2.4.1 has directory traversal under the /next and /static request namespace, allowing attackers to obtain sensitive information...