Описание
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict unhandledRejection
exiting AND using next start or a custom server. Deployments on Vercel (vercel.com) are not affected along with similar environments where next-server
isn't being shared across requests.
Ссылки
- Release NotesThird Party Advisory
- Third Party Advisory
- Release NotesThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 15.0.0 (включая)
Одновременно
cpe:2.3:a:vercel:next.js:12.2.3:*:*:*:*:node.js:*:*
cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*
EPSS
Процентиль: 26%
0.00086
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-248
CWE-754
Связанные уязвимости
EPSS
Процентиль: 26%
0.00086
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-248
CWE-754