cve/2017/CVE-2017-16877.md
2024-05-26 14:27:05 +02:00

755 B

CVE-2017-16877

Description

ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.

POC

Reference

No PoCs from references.

Github