← Back to CVE List

CVE-2017-16877

Published: 2017-11-17T17:29Z
Last Modified: 2024-11-21T03:17Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt