CVE-2018-6184 PoC — ZEIT Next.js 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6184.yaml

Associated Vulnerability

Title: ZEIT Next.js 路径遍历漏洞 (CVE-2018-6184)
Description:ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /_next request namespace.

Description

Zeit Next.js before 4.2.3 is susceptible to local file inclusion under the /_next request namespace. An attacker can obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →