CVE-2017-16877

CVE-2017-16877

This page contains facts from public vulnerability sources. Check the original advisory before updating.

ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.

CVSS 7.5 · High · EPSS 14.1% · Public exploit · Fix available

Published

2017-11-17T17:00:00.000Z

Updated

2024-09-17T02:31:11.770Z

Stack: node

Check your server →