4.7
Moyenne
CVE-2020-15242 Next.js versions >=9.5.0 and <9.5.4 are vulnerable to an Open Redirect
Description
Next.js versions >=9.5.0 and <9.5.4 are vulnerable to an Open Redirect. Specially encoded paths could be used with the trailing slash redirect to allow an open redirect to occur to an external site. In general, this redirect does not directly harm users although can allow for phishing attacks by redirecting to an attackers domain from a trusted domain. The issue is fixed in version 9.5.4.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| next.js 9.5 | 9.5.0 → < 9.5.4 | 9.5.4 |
Références
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de next.js
Les 57 CVE de next.js →
CVE-2026-94482
Next.js is a React framework for building full-stack web applications
8.2
Élevée
CVE-2026-94484
Next.js is a React framework for building full-stack web applications
6.3
Moyenne
CVE-2026-94485
Next.js is a React framework for building full-stack web applications
6.3
Moyenne
CVE-2026-94483
Next.js is a React framework for building full-stack web applications
8.3
Élevée