CVE-2017-16877
Published · Updated
23Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 14%
exploitation probability
14%top 3% of all CVEs
observed exploitation
nono source reports it
ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.
Affected products
n/a · n/a