Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ru_Raz0R

#34973of 53,630
7.5Total CVSS
Vulnerabilities · 1
PT-2017-14612
7.5
2017-11-17
Vercel · Next.Js · CVE-2017-16877
**Name of the Vulnerable Software and Affected Versions** Next.js versions prior to 2.4.1 **Description** The issue allows attackers to obtain sensitive information through directory traversal under the `/static` and `/ next` request namespaces. **Recommendations** For versions prior to 2.4.1, update to version 2.4.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the `/static` and `/ next` request namespaces until a patch is applied.