VDB
CVE-2024-46982
CVE-2024-46982
PUBLISHED
CVSS 7.5 HIGH
Next.js Cache Poisoning
EPSS 59.18% · 99.0th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
59.18%
99.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| vercel | next.js | 13.5.1, 14.0.0, >= 13.5.1, < 13.5.7 |
| vercel | next.js | 13.5.1, 14.0.0 |
| npm | next | 13.5.1, 14.0.0 |
Timeline
- Jan 21, 1970 Security Advisory
- May 20, 2023 CrowdSec Sighting
- Sep 17, 2024 CVE Published
- Sep 18, 2024 CVE Updated
- Sep 18, 2024 EPSS Score
- Sep 18, 2024 PoC Published
- Sep 19, 2024 PoC Published
- Sep 21, 2024 PoC Published
- Oct 5, 2024 Coalition ESS Score
- Dec 14, 2024 VulnCheck XDB Entry
- Dec 14, 2024 PoC Published
- Jan 23, 2025 VulnCheck XDB Entry
References
- https://www.ibm.com/support/pages/node/7176657 advisory
- https://www.ibm.com/support/pages/node/7176642 advisory
- https://www.ibm.com/support/pages/node/7176660 advisory
- https://www.ibm.com/support/pages/node/7176201 advisory
- https://www.ibm.com/support/pages/node/7176391 advisory
- https://www.ibm.com/support/pages/node/7176392 advisory
- https://www.ibm.com/support/pages/node/7176386 advisory
- https://www.ibm.com/support/pages/node/7176389 advisory
- https://www.ibm.com/support/pages/node/7176451 advisory
- https://www.ibm.com/support/pages/node/7176388 advisory
- https://www.ibm.com/support/pages/node/7176205 advisory
- https://github.com/vercel/next.js/security/advisories/GHSA-gp8f-8m3g-qvj9 url
- https://nvd.nist.gov/vuln/detail/CVE-2024-46982 advisory
- https://github.com/vercel/next.js/commit/7ed7f125e07ef0517a331009ed7e32691ba403d3 url
- https://github.com/vercel/next.js/commit/bd164d53af259c05f1ab434004bcfdd3837d7cda url
- https://github.com/vercel/next.js package
- https://www.ibm.com/support/pages/node/7174802 advisory
- https://www.ibm.com/support/pages/node/7174634 advisory
- https://www.ibm.com/support/pages/node/7174639 advisory
- https://www.ibm.com/support/pages/node/7175196 advisory
…and 7 more