Zeit Next.js < 4.2.3 - Local File Inclusion

Zeit Next.js before 4.2.3 is susceptible to local file inclusion under the /next request namespace. An attacker can obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2018-6184 info: name: Zeit Next.js =4.2...

CVE-2018-6184

Zeit Next.js 4.x before 4.2.3 is vulnerable to a directory traversal via the /_next request namespace. The connected templates describe Local File Inclusion/LFI exposure, allowing an attacker to read sensitive files and potentially modify data or perform administrative actions within the affected...