Описание
Next.js Directory Traversal Vulnerability
Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.
Пакеты
Наименование
next
npm
Затронутые версииВерсия исправления
>= 1.0.0, < 2.4.1
2.4.1
Связанные уязвимости
CVSS3: 7.5
nvd
больше 7 лет назад
ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.