Description

Next.js is a React framework. A Denial of Service (DoS) condition was identified in Next.js. Exploitation of the bug can trigger a crash, affecting the availability of the server. his vulnerability was resolved in Next.js 13.5 and later.

Remediation

References

CVE-2024-39693

Related Vulnerabilities

SharePoint CVE-2022-21987 Vulnerability (CVE-2022-21987)

OpenSSL Other Vulnerability (CVE-2016-0797)

WordPress Plugin Canto Multiple Server-Side Request Forgery Vulnerabilities (1.7.0)

Magento Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') Vulnerability (CVE-2019-8126)

WordPress Plugin GeoDirectory Location Manager Multiple SQL Injection Vulnerabilities (2.1.0.9)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities CWE-400 CVE-2024-39693