Description
ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.
Remediation
References
Related Vulnerabilities
WordPress Plugin Store Locator Plus for WordPress Open Email Relay (4.2.25)
Django Cleartext Transmission of Sensitive Information Vulnerability (CVE-2019-12781)
WordPress Plugin NextScripts:Social Networks Auto-Poster Security Bypass (4.3.17)
OpenSSL CVE-2024-0727 Vulnerability (CVE-2024-0727)
WordPress Plugin WP Review Unspecified Vulnerability (5.2.1)