Description
Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /_error page.
Remediation
References
https://github.com/zeit/next.js/releases/tag/7.0.2
Related Vulnerabilities
CVE-2019-1351 Vulnerability in maven package org.webjars.npm:nodegit
CVE-2018-1000190 Vulnerability in maven package com.blackducksoftware.integration:blackduck-hub
CVE-2020-1912 Vulnerability in npm package hermes-engine
CVE-2017-15697 Vulnerability in maven package org.apache.nifi:nifi-web-error
CVE-2021-43090 Vulnerability in maven package com.predic8:soa-model-core