Description
ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /_next request namespace.
Remediation
References
https://github.com/zeit/next.js/releases/tag/4.2.3
Related Vulnerabilities
CVE-2020-7777 Vulnerability in npm package jsen
CVE-2021-4305 Vulnerability in npm package robots-txt-guard
CVE-2022-45688 Vulnerability in maven package cn.hutool:hutool-json
CVE-2022-43484 Vulnerability in maven package org.terasoluna.gfw:terasoluna-gfw-common
CVE-2022-31139 Vulnerability in maven package io.github.karlatemp:unsafe-accessor