zeit

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

zeit records in CISA KEV

No zeit vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Next.js · all components

TI-2020-04340 CVE-2020-5284 · GHSA-fq77-7p7r-83rj

MEDIUM 50

Next.js versions before 9.3.2 have a directory traversal vulnerability.

CVSS 3.1MEDIUM 4.4 Network Low privileges User interaction EPSS 0.44776 Published 2020-03-30 Fixed in 9.3.2 CWE-23

TI-2017-12422 CVE-2017-16877 · GHSA-3f5c-4qxj-vmpf

MEDIUM 48

ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.14104 Published 2017-11-17 Fixed in 2.4.1 CWE-22

TI-2018-04542 CVE-2018-6184 · GHSA-m34x-wgrh-g897

MEDIUM 44

ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /_next request namespace.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0906 Published 2018-01-24 Fixed in 4.2.3 CWE-22

TI-2018-12917 CVE-2018-18282 · GHSA-qw96-mm2g-c8m7

LOW 29

Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /_error page.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0103 Published 2018-10-12 Fixed in 7.0.2 CWE-79