Lucene search
+L

66 matches found

CNNVD
CNNVD
added 2024/05/14 12:00 a.m.10 views

ZEIT Next.js 环境问题漏洞

ZEIT Next.js is an open source web application framework from ZEIT based on Vue.js, Node.js, Webpack and Babel.js. An environmental issue vulnerability exists in ZEIT Next.js versions 13.4 through prior to 13.5.1 that stems from the presence of a response queue poisoning vulnerability...

7.5CVSS7.3AI score0.0119EPSS
SaveExploits0References3
OSV
OSV
added 2024/05/09 9:07 p.m.81 views

GHSA-77R5-GW3J-2MPF Next.js Vulnerable to HTTP Request Smuggling

Impact Inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses. This led to a response queue poisoning vulnerability in the affected Next.js versions. For a request to...

7.5CVSS7.4AI score0.0119EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2024/05/09 9:07 p.m.63 views

Next.js Vulnerable to HTTP Request Smuggling

Impact Inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses. This led to a response queue poisoning vulnerability in the affected Next.js versions. For a request to...

7.5CVSS6.6AI score0.0119EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/05/09 4:07 p.m.12 views

CVE-2024-34350 Next.js Vulnerable to HTTP Request Smuggling

Next.js is a React framework that can provide building blocks to create web applications. Prior to 13.5.1, an inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses...

7.5CVSS7.2AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/05/09 4:07 p.m.16 views

CVE-2024-34350 Next.js Vulnerable to HTTP Request Smuggling

Next.js is a React framework that can provide building blocks to create web applications. Prior to 13.5.1, an inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses...

7.5CVSS6.7AI score0.0119EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2024/04/12 3:59 a.m.2431 views

Exploit for HTTP Request Smuggling in Apache Http_Server

CVE-2022-26377 A Proof of Concept developed by @watchTowr to...

7.5CVSS9.1AI score0.21079EPSS
SaveExploits1
Rows per page
Query Builder