安裝在遠端主機上的 Next.js 版本是在 13.5.113.5.7 之前或 14.0.x 之前 14.2.10。因此，它會受到藏匿中毒的影響。

請注意，掃描器程式並未嘗試利用此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

リモートホストにインストールされるNext.jsのバージョンは、13.5.7の前か14.0.x14.2.10の前に13.5.1されます。したがって、キャッシュ中毒の影響を受けます。

注意: スキャナーはこの問題を悪用しようとしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

安装在远程主机上的Next.js版本是在13.5.113.5.7之前或14.0.x之前14.2.10。因此，它会受到缓存中毒的影响。

请注意，扫描程序并未试图利用此问题，而只依赖于应用程序自我报告的版本号。

The version of Next.js installed on the remote host is 13.5.1 prior to 13.5.7 or 14.0.x prior to 14.2.10. It is, therefore, affected by a Cache Poisoning.

Note that the scanner has not attempted to exploit this issue but has instead relied only on application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Next.js is a React framework for building full-stack web applications. By sending a crafted HTTP request,
    it is possible to poison the cache of a non-dynamic server-side rendered route in the pages router (this
    does not affect the app router). When this crafted request is sent it could coerce Next.js to cache a
    route that is meant to not be cached and send a `Cache-Control: s-maxage=1, stale-while-revalidate` header
    which some upstream CDNs may cache as well. To be potentially affected all of the following must apply: 1.
    Next.js between 13.5.1 and 14.2.9, 2. Using pages router, & 3. Using non-dynamic server-side rendered
    routes e.g. `pages/dashboard.tsx` not `pages/blog/[slug].tsx`. This vulnerability was resolved in Next.js
    v13.5.7, v14.2.10, and later. We recommend upgrading regardless of whether you can reproduce the issue or
    not. There are no official or recommended workarounds for this issue, we recommend that users patch to a
    safe version. (CVE-2024-46982)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
114770	Next.js 14.0.x < 14.2.10 藏匿中毒	Web App Scanning	Component Vulnerability	2025/4/10	2025/4/10	high
114770	Next.js 14.0.x < 14.2.10 キャッシュ中毒	Web App Scanning	Component Vulnerability	2025/4/10	2025/4/10	high
114770	Next.js 14.0.x < 14.2.10 缓存中毒	Web App Scanning	Component Vulnerability	2025/4/10	2025/4/10	high
114770	Next.js 14.0.x < 14.2.10 Cache Poisoning	Web App Scanning	Component Vulnerability	2025/4/10	2025/4/10	high
114769	Next.js 13.5.1 < 13.5.7 キャッシュ中毒	Web App Scanning	Component Vulnerability	2025/4/10	2025/4/10	high
114769	Next.js 13.5.1 < 13.5.7 Cache Poisoning	Web App Scanning	Component Vulnerability	2025/4/10	2025/4/10	high
114769	Next.js 13.5.1 < 13.5.7 缓存中毒	Web App Scanning	Component Vulnerability	2025/4/10	2025/4/10	high
114769	Next.js 13.5.1 < 13.5.7 藏匿中毒	Web App Scanning	Component Vulnerability	2025/4/10	2025/4/10	high
415225	SCA: security update for next (GHSA-gp8f-8m3g-qvj9)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	high
415225	SCA: security update for next (GHSA-gp8f-8m3g-qvj9)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high