Next.js 架構 9.5.x 的 9.5.4 之前版本受到開放式重新導向弱點影響，此弱點允許攻擊者透過特製的連結嘗試將目標應用程式使用者重新導向至惡意伺服器。

Next.js framework versions 9.5.x before 9.5.4 suffer from an open redirect vulnerability, allowing an attacker to craft a link and try redirecting target applications users to a malicious server.

Next.js フレームワークのバージョン 9.5.4 より前の 9.5.x は、オープンリダイレクトの脆弱性の影響を受けるため、攻撃者がリンクを細工し、ターゲットアプリケーションのユーザーを悪意のあるサーバーにリダイレクトする可能性があります。

Next.js framework 版本 9.5.4 之前的 9.5.x 会受到开放重定向漏洞的影响，攻击者可利用此漏洞，构建链接并尝试将目标应用程序用户重定向到恶意服务器。

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Next.js versions >=9.5.0 and <9.5.4 are vulnerable to an Open Redirect. Specially encoded paths could be
    used with the trailing slash redirect to allow an open redirect to occur to an external site. In general,
    this redirect does not directly harm users although can allow for phishing attacks by redirecting to an
    attackers domain from a trusted domain. The issue is fixed in version 9.5.4. (CVE-2020-15242)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
113835	Next.js 9.5.x < 9.5.4 開放式重新導向	Web App Scanning	Component Vulnerability	2023/3/28	2023/3/28	medium
113835	Next.js 9.5.x < 9.5.4 Open Redirect	Web App Scanning	Component Vulnerability	2023/3/28	2023/3/28	medium
113835	Next.js 9.5.x < 9.5.4 オープンリダイレクト	Web App Scanning	Component Vulnerability	2023/3/28	2023/3/28	medium
113835	Next.js 9.5.x < 9.5.4 开放重定向	Web App Scanning	Component Vulnerability	2023/3/28	2023/3/28	medium
420299	SCA: security update for next (GHSA-x56p-c8cg-q435)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	medium
420299	SCA: security update for next (GHSA-x56p-c8cg-q435)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium