ZEIT Next.js Directory Traversal Vulnerability

Next.js is a minimalist server-side rendering framework for React applications. A directory traversal vulnerability exists in ZEIT Next.js versions prior to 2.4.1 under the /next and /static request namespaces. An attacker can exploit this vulnerability to obtain sensitive information...

PT-2017-14612 · Vercel · Next.Js

Name of the Vulnerable Software and Affected Versions: Next.js versions prior to 2.4.1 Description: The issue allows attackers to obtain sensitive information through directory traversal under the /static and / next request namespaces. Recommendations: For versions prior to 2.4.1, update to versi...