What is GHSA-m34x-wgrh-g897?

GHSA-m34x-wgrh-g897 is a security advisory published by GitHub Security Advisories with High severity. Directory traversal vulnerability in Next.js

Which CVE IDs does GHSA-m34x-wgrh-g897 cover?

GHSA-m34x-wgrh-g897 covers the following CVE IDs: CVE-2018-6184. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m34x-wgrh-g897?

GHSA-m34x-wgrh-g897 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-m34x-wgrh-g897?

GHSA-m34x-wgrh-g897 affects 1 product, including: npm/next:\u003e= 1.0.0, \u003c 4.2.3.

GHSA-m34x-wgrh-g897HighCVSS 7.5

Directory traversal vulnerability in Next.js

Vendor

GitHub Security Advisories

Published

January 24, 2018

Last Modified

January 9, 2023

🔗 CVE IDs covered (1)

CVE-2018-6184 →

📋 Description

Next.js 4 before 4.2.3 has Directory Traversal under the /_next request namespace.

🎯 Affected products1

npm/next:>= 1.0.0, < 4.2.3

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2018-6184
https://github.com/advisories/GHSA-m34x-wgrh-g897
https://github.com/vercel/next.js/releases/tag/4.2.3