Security Advisory

CVE-2017-16877

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-11-17 17:00:00

Last updated 2024-09-17 02:31:11

Assigner mitre

State PUBLISHED

ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.