fix trail space
parent
5a5021edb9
commit
14309dcc5c
|
@ -1,9 +1,8 @@
|
|||
|
||||
id: CVE-2023-46298
|
||||
|
||||
info:
|
||||
name: Next.js Cache Poisoning
|
||||
author: ProjectDiscoveryAI
|
||||
author: Ice3man543
|
||||
severity: high
|
||||
description: |
|
||||
Next.js is vulnerable to cache poisoning through the x-middleware-prefetch and x-invoke-status headers. This can result in DoS by serving an empty JSON object or error page instead of the intended content, affecting SSR responses.
|
||||
|
@ -25,6 +24,7 @@ info:
|
|||
- http.html:"/_next/static"
|
||||
- cpe:"cpe:2.3:a:zeit:next.js"
|
||||
fofa-query: body="/_next/static"
|
||||
tags: cve,cve2023,next-js,cache
|
||||
|
||||
variables:
|
||||
rand: "{{rand_text_numeric(5)}}"
|
||||
|
|
Loading…
Reference in New Issue