CVE-2020-5284
Directory Traversal in Next.js
概要
Directory Traversal in Next.js
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Impact
- Not affected: Deployments on ZEIT Now v2 (https://zeit.co) are not affected
- Not affected: Deployments using the
serverlesstarget - Not affected: Deployments using
next export - Affected: Users of Next.js below 9.3.2
We recommend everyone to upgrade regardless of whether you can reproduce the issue or not.
Patches
https://github.com/zeit/next.js/releases/tag/v9.3.2
References
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
npm
next
[{"type":"SEMVER","events":[{"introduced":"0.9.9"},{"fixed":"9.3.2"}]}]
参照URL
- advisory nvd.nist.gov
- web github.com
- web github.com
- web npmjs.com