CVE-2024-34351
HIGH NUCLEINext.js 13.4.0-14.1.1 - Server-Side Request Forgery via Server Actions Redirect
Title source: manualExploitation Summary
EIP tracks 5 public exploits for CVE-2024-34351. PoCs published by iSee857, Voorivex, God4n. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains functional exploit code for multiple CVEs, including CVE-2026-22812, which demonstrates command execution via a session-based API endpoint. The code includes proper error handling, threading for batch scanning, and JSON payload construction.
Description
Next.js is a React framework that can provide building blocks to create web applications. A Server-Side Request Forgery (SSRF) vulnerability was identified in Next.js Server Actions. If the `Host` header is modified, and the below conditions are also met, an attacker may be able to make requests that appear to be originating from the Next.js application server itself. The required conditions are 1) Next.js is running in a self-hosted manner; 2) the Next.js application makes use of Server Actions; and 3) the Server Action performs a redirect to a relative path which starts with a `/`. This vulnerability was fixed in Next.js `14.1.1`.
Exploits (5)
The repository contains functional exploit code for multiple CVEs, including CVE-2026-22812, which demonstrates command execution via a session-based API endpoint. The code includes proper error handling, threading for batch scanning, and JSON payload construction.
The repository contains minimal setup files for a Next.js project but lacks any exploit code or technical details about CVE-2024-34351. It appears to be a placeholder or test-bed without functional PoC.
This repository contains a functional proof-of-concept exploit for CVE-2024-34351, a Server-Side Request Forgery (SSRF) vulnerability in Next.js. The exploit involves setting up a redirect server that manipulates headers to trigger the SSRF, allowing an attacker to fetch arbitrary content from the Next.js server.
This repository contains functional exploit code demonstrating CVE-2024-34351 in Next.js, showcasing client-side rendering (CSR) and server-side rendering (SSR) vulnerabilities. The PoC includes multiple test cases for data loading and routing, illustrating the vulnerability's impact.
This repository contains a functional proof-of-concept for CVE-2024-34351, an SSRF vulnerability in Next.js Server Actions. It includes a vulnerable Next.js application, an attacker-controlled server to demonstrate the SSRF, and detailed exploitation steps.
Nuclei Templates (1)
http.html:"/_next/static" || cpe:"cpe:2.3:a:zeit:next.js"
body="/_next/static"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N