TI-2020-04340 CVE-2020-5284 · GHSA-fq77-7p7r-83rj
Directory Traversal in Next.js versions below 9.3.2
Priority MEDIUM 50
Next.js versions before 9.3.2 have a directory traversal vulnerability.
Vulnerabilities
4 records
TI-2018-12917 CVE-2018-18282 · GHSA-qw96-mm2g-c8m7
Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /_error page.
Priority LOW 29
Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /_error page.
TI-2018-04542 CVE-2018-6184 · GHSA-m34x-wgrh-g897
ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /_next request namespace.
Priority MEDIUM 44
ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /_next request namespace.
TI-2017-12422 CVE-2017-16877 · GHSA-3f5c-4qxj-vmpf
ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request…
Priority MEDIUM 48
ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.