3 matches found
Next.js: Server-Side Request Forgery in Server Actions on custom servers
Impact When a Server Action forwards or redirects a request, an attacker can cause the server to send that outbound request to a malicious host Server-Side Request Forgery. This requires the attacker's request to control Host-associated headers. In some configurations, it's also possible to obtai...
8.3CVSS5.4AI score0.00448EPSS
SaveExploits0References6Affected Software1
20