Description
ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /_next request namespace.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Zeit Next.js < 4.2.3 - Local File Inclusion http/cves/2018/CVE-2018-6184.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | next | >= 1.0.0, < 4.2.3 | 4.2.3 | GHSA-m34x-wgrh-g897 |