Description

Next.js is a minimalistic framework for server-rendered React applications.

A directory traversal issue exists on Next.js versions lower than 2.4.1. This issues affects the /_next and /static request namespaces. An attacker can craft a request that accesses potentially sensitive information in your filesystem.

Remediation

Upgrade to the latest version of Next.js (this issue was fixed in Next.js version 2.4.1).

References

Next.js and Serve Security Patches

Arbitrary File Reading in Next.js < 2.4.1

Related Vulnerabilities

Ext JS arbitrary file read

WordPress Plugin Aspose Cloud eBook Generator Arbitrary File Download (1.0)

Opencart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-11494)

WordPress Plugin Elements For Elementor Local File Inclusion (2.1)

WordPress Plugin Page Flip Image Gallery 'book_id' Parameter Remote File Disclosure (0.2.2)

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Directory Traversal