PT-2023-29944 · Next.Js · Next.Js

Muntamala · Published 2023-10-21 · Updated 2025-05-30 · CVE-2023-46298

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Next.js versions prior to 13.4.20-canary.13

Description The issue is related to the lack of a cache-control header in Next.js, which can cause empty prefetch responses to be cached by a CDN. This can lead to a denial of service for all users requesting the same URL via that CDN. Cloudflare considers these requests cacheable assets.

Recommendations For versions prior to 13.4.20-canary.13, consider updating to a version that includes the necessary cache-control header to prevent empty prefetch responses from being cached by a CDN. As a temporary workaround, consider configuring your CDN to not cache empty prefetch responses.

Exploit

Fix

Related Identifiers

CVE-2023-46298

GHSA-C59H-R6P8-Q9WC

Affected Products

Next.Js

References · 14

• 🔥 https://github.com/vercel/next.js/issues/45301 · Exploit
• https://github.com/vercel/next.js/pull/54732 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-46298 · Security Note
• https://osv.dev/vulnerability/GHSA-c59h-r6p8-q9wc · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-46298 · Vendor Advisory
• https://github.com/vercel/next.js · Note
• https://github.com/vercel/next.js/compare/v13.4.20-canary.12...v13.4.20-canary.13 · Note
• https://github.com/vercel/next.js/commit/20d05958ff853e9c9e42139ffec294336881c648 · Note
• https://twitter.com/UMichBlockchain/status/1927560607563149364 · Twitter Post
• https://t.me/cvenotify/59907 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1715965240708366566 · Twitter Post
• https://twitter.com/zhero___/status/1928584492194595261 · Twitter Post
• https://twitter.com/Ev3rPalestine/status/1738284815227441344 · Twitter Post
• https://t.me/cibsecurity/72737 · Telegram Post