← back
CVE-2020-15242

Open Redirect in Next.js

CVSS 4.7 MEDIUMEPSS 0.8%CWE-601
In short

Next.js versions 9.5.0 to 9.5.3 have a flaw that allows attackers to redirect users to external websites by manipulating specially encoded URL paths. While the redirect itself doesn't cause direct damage, it can be used for phishing attacks to trick users into visiting malicious sites.

Technical detail

An open redirect vulnerability exists in Next.js trailing slash redirect handling where specially encoded paths bypass validation and redirect to attacker-controlled external domains. The attack requires only a crafted URL and affects versions 9.5.0 through 9.5.3, enabling credential harvesting and phishing campaigns through trusted domain redirects.

Summary generated and translated by AI from the official description.
Next.js versions >=9.5.0 and <9.5.4 are vulnerable to an Open Redirect. Specially encoded paths could be used with the trailing slash redirect to allow an open redirect to occur to an external site. In general, this redirect does not directly harm users although can allow for phishing attacks by redirecting to an attackers domain from a trusted domain. The issue is fixed in version 9.5.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
Affected products
vercel · next.js

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →