CVE-2018-6184 PoC — ZEIT Next.js 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6184.yaml

Associated Vulnerability

Title:ZEIT Next.js 路径遍历漏洞 (CVE-2018-6184)
Description:ZEIT Next.js是一款开源的通用webapps开发框架。 ZEIT Next.js 4.2.3之前的4版本中存在目录遍历漏洞。攻击者可利用该漏洞访问前端JavaScript组件或可能获取敏感数据。

Description

Zeit Next.js before 4.2.3 is susceptible to local file inclusion under the /_next request namespace. An attacker can obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

File Snapshot


 id: CVE-2018-6184

info:
  name: Zeit Next.js <4.2.3 -  Local File Inclusion
  author: DhiyaneshDK
 

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!