CVE-2020-15242
Open Redirect in Next.js
In short
Next.js versions 9.5.0 to 9.5.3 have a flaw that allows attackers to redirect users to external websites by manipulating specially encoded URL paths. While the redirect itself doesn't cause direct damage, it can be used for phishing attacks to trick users into visiting malicious sites.
Technical detail
An open redirect vulnerability exists in Next.js trailing slash redirect handling where specially encoded paths bypass validation and redirect to attacker-controlled external domains. The attack requires only a crafted URL and affects versions 9.5.0 through 9.5.3, enabling credential harvesting and phishing campaigns through trusted domain redirects.
Summary generated and translated by AI from the official description.
Next.js versions >=9.5.0 and <9.5.4 are vulnerable to an Open Redirect. Specially encoded paths could be used with the trailing slash redirect to allow an open redirect to occur to an external site. In general, this redirect does not directly harm users although can allow for phishing attacks by redirecting to an attackers domain from a trusted domain. The issue is fixed in version 9.5.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
Affected products
vercel · next.jsWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →