CVE-2017-16877

HIGH7.5EPSS 80.8%

Next.js Directory Traversal Vulnerability

Published: 12/5/2017Modified: 4/22/2024

Description

Next.js before 2.4.1 has directory traversal under the `/_next` and `/static` request namespace, allowing attackers to obtain sensitive information.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References (4)