CVEs-PoC/2017/CVE-2017-16877.md

CVE-2017-16877

Description

ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.

POC

Reference

No PoCs from references.

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/Elsfa7-110/kenzer-templates
• https://github.com/ayrad0/next.js-pentesting
• https://github.com/ossf-cve-benchmark/CVE-2017-16877