Vulnerability
Description
A directory traversal vulnerability exists in versions of Next.js prior to 9.3.2. Unauthenticated Attackers could craft special requests to access files in the dist directory (.next). Outside of the dist directory, this has no effect (.next). Unless your application contains other assets in the dist directory, the dist directory should solely contain build assets. This issue has been addressed in version 9.3.2.
Recommendation
- Update Next.js to the latest version
Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 10 days
