CVE-2024-46982
HIGHCVSS v3
7.5
HIGH
EPSS Score
49.6%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
Next.js is a React framework for building full-stack web applications. By sending a crafted HTTP request, it is possible to poison the cache of a non-dynamic server-side rendered route in the pages router (this does not affect the app router). When this crafted request is sent it could coerce Next.js to cache a route that is meant to not be cached and send a `Cache-Control: s-maxage=1, stale-while-revalidate` header which some upstream CDNs may cache as well. To be potentially affected all of the following must apply: 1. Next.js between 13.5.1 and 14.2.9, 2. Using pages router, & 3. Using non-dynamic server-side rendered routes e.g. `pages/dashboard.tsx` not `pages/blog/[slug].tsx`. This vulnerability was resolved in Next.js v13.5.7, v14.2.10, and later. We recommend upgrading regardless of whether you can reproduce the issue or not. There are no official or recommended workarounds for this issue, we recommend that users patch to a safe version.
Technical Details
- Published
- 9/17/2024
Frequently Asked Questions
What is CVE-2024-46982?
Next.js is a React framework for building full-stack web applications. By sending a crafted HTTP request, it is possible to poison the cache of a non-dynamic server-side rendered route in the pages router (this does not affect the app router). When this crafted request is sent it could coerce Next.js to cache a route that is meant to not be cached and send a `Cache-Control: s-maxage=1, stale-while-revalidate` header which some upstream CDNs may cache as well. To be potentially affected all of the following must apply: 1. Next.js between 13.5.1 and 14.2.9, 2. Using pages router, & 3. Using non-dynamic server-side rendered routes e.g. `pages/dashboard.tsx` not `pages/blog/[slug].tsx`. This vulnerability was resolved in Next.js v13.5.7, v14.2.10, and later. We recommend upgrading regardless of whether you can reproduce the issue or not. There are no official or recommended workarounds for this issue, we recommend that users patch to a safe version.
Is CVE-2024-46982 actively exploited?
Active exploitation of CVE-2024-46982 has not been confirmed. The EPSS score is 49.6%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2024-46982?
CVE-2024-46982 has a CVSS v3 base score of 7.5 (HIGH severity).
Is CVE-2024-46982 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.