PT-2024-25807 · Next.Js · Next.Js

Elifoster-Block · Published 2024-05-09 · Updated 2024-05-18 · CVE-2024-34350

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Next.js versions prior to 13.5.1

Description The issue arises from an inconsistent interpretation of crafted HTTP requests, leading to desynchronized responses and a response queue poisoning vulnerability. This occurs when the affected route utilizes the rewrites feature in Next.js.

Recommendations For versions prior to 13.5.1, upgrade to Next.js version 13.5.1 or newer, which includes Next.js 14.x, to resolve the vulnerability. As a temporary workaround, consider avoiding the use of the rewrites feature in Next.js until the issue is resolved.

Exploit

Fix

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

CVE-2024-34350

GHSA-77R5-GW3J-2MPF

Affected Products

Next.Js

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/34xxx/CVE-2024-34350.json · Exploit
• https://github.com/vercel/next.js/security/advisories/GHSA-77r5-gw3j-2mpf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-34350 · Security Note
• https://osv.dev/vulnerability/CVE-2024-34350 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-77r5-gw3j-2mpf · Vendor Advisory
• https://github.com/vercel/next.js · Note
• https://github.com/vercel/next.js/compare/v13.5.0...v13.5.1 · Note
• https://github.com/vercel/next.js/commit/44eba020c615f0d9efe431f84ada67b81576f3f5 · Note
• https://twitter.com/cracbot/status/1792072823281995947 · Twitter Post
• https://twitter.com/cracbot/status/1791710437723267490 · Twitter Post
• https://t.me/pentestingnews/46779 · Telegram Post