CVE-2017-16877

HIGHNuclei

Next.js Directory Traversal Vulnerability

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2017-16877 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

next

Browse npm / next
GitHub Advisory1.0.0 to < 2.4.1 · Fixed in 2.4.1affected

Nuclei templates

1
ProjectDiscoveryHIGHNextjs <2.4.1 - Local File InclusionCVSS 7.5

ZEIT Next.js before 2.4.1 is susceptible to local file inclusion via the /_next and /static request namespace, allowing attackers to obtain sensitive information.

Impact

Successful exploitation of this vulnerability could allow an attacker to read sensitive files on the server, leading to unauthorized access and potential data leakage.

Remediation

Upgrade Nextjs to version 2.4.1 or above to mitigate this vulnerability.

WeaknessesCWE-22
Authorspikpikcu
Template tagscvecve2017nextjslfitraversalzeitvuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*
Shodan: http.html:"/_next/static"
Shodan: cpe:"cpe:2.3:a:zeit:next.js"
FOFA: body="/_next/static"
https://medium.com/@theRaz0r/arbitrary-file-reading-in-next-js-2-4-1-34104c4e75e9 https://github.com/zeit/next.js/releases/tag/2.4.1 https://nvd.nist.gov/vuln/detail/CVE-2017-16877 https://github.com/vercel/next.js/commit/02fe7cf63f6265d73bdaf8bc50a4f2fb539dcd00 https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

4