CVE-2023-46298
 
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN.
Next.js anterior a 13.4.20-canary.13 carece de un encabezado de control de caché y, por lo tanto, a veces una CDN puede almacenar en caché respuestas de captación previa vacías, lo que provoca una denegación de servicio a todos los usuarios que solicitan la misma URL a través de esa CDN.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-10-22 CVE Reserved
- 2023-10-22 CVE Published
- 2024-09-12 CVE Updated
- 2024-09-12 First Exploit
- 2024-10-28 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (3)
URL | Tag | Source |
---|---|---|
https://github.com/vercel/next.js/compare/v13.4.20-canary.12...v13.4.20-canary.13 | Product |
URL | Date | SRC |
---|---|---|
https://github.com/vercel/next.js/issues/45301 | 2024-09-12 |
URL | Date | SRC |
---|---|---|
https://github.com/vercel/next.js/pull/54732 | 2023-10-28 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Vercel Search vendor "Vercel" | Next.js Search vendor "Vercel" for product "Next.js" | < 13.4.20 Search vendor "Vercel" for product "Next.js" and version " < 13.4.20" | node.js |
Affected
| ||||||
Vercel Search vendor "Vercel" | Next.js Search vendor "Vercel" for product "Next.js" | 13.4.20 Search vendor "Vercel" for product "Next.js" and version "13.4.20" | canary0, node.js |
Affected
| ||||||
Vercel Search vendor "Vercel" | Next.js Search vendor "Vercel" for product "Next.js" | 13.4.20 Search vendor "Vercel" for product "Next.js" and version "13.4.20" | canary1, node.js |
Affected
| ||||||
Vercel Search vendor "Vercel" | Next.js Search vendor "Vercel" for product "Next.js" | 13.4.20 Search vendor "Vercel" for product "Next.js" and version "13.4.20" | canary10, node.js |
Affected
| ||||||
Vercel Search vendor "Vercel" | Next.js Search vendor "Vercel" for product "Next.js" | 13.4.20 Search vendor "Vercel" for product "Next.js" and version "13.4.20" | canary11, node.js |
Affected
| ||||||
Vercel Search vendor "Vercel" | Next.js Search vendor "Vercel" for product "Next.js" | 13.4.20 Search vendor "Vercel" for product "Next.js" and version "13.4.20" | canary12, node.js |
Affected
| ||||||
Vercel Search vendor "Vercel" | Next.js Search vendor "Vercel" for product "Next.js" | 13.4.20 Search vendor "Vercel" for product "Next.js" and version "13.4.20" | canary2, node.js |
Affected
| ||||||
Vercel Search vendor "Vercel" | Next.js Search vendor "Vercel" for product "Next.js" | 13.4.20 Search vendor "Vercel" for product "Next.js" and version "13.4.20" | canary3, node.js |
Affected
| ||||||
Vercel Search vendor "Vercel" | Next.js Search vendor "Vercel" for product "Next.js" | 13.4.20 Search vendor "Vercel" for product "Next.js" and version "13.4.20" | canary4, node.js |
Affected
| ||||||
Vercel Search vendor "Vercel" | Next.js Search vendor "Vercel" for product "Next.js" | 13.4.20 Search vendor "Vercel" for product "Next.js" and version "13.4.20" | canary5, node.js |
Affected
| ||||||
Vercel Search vendor "Vercel" | Next.js Search vendor "Vercel" for product "Next.js" | 13.4.20 Search vendor "Vercel" for product "Next.js" and version "13.4.20" | canary6, node.js |
Affected
| ||||||
Vercel Search vendor "Vercel" | Next.js Search vendor "Vercel" for product "Next.js" | 13.4.20 Search vendor "Vercel" for product "Next.js" and version "13.4.20" | canary7, node.js |
Affected
| ||||||
Vercel Search vendor "Vercel" | Next.js Search vendor "Vercel" for product "Next.js" | 13.4.20 Search vendor "Vercel" for product "Next.js" and version "13.4.20" | canary8, node.js |
Affected
| ||||||
Vercel Search vendor "Vercel" | Next.js Search vendor "Vercel" for product "Next.js" | 13.4.20 Search vendor "Vercel" for product "Next.js" and version "13.4.20" | canary9, node.js |
Affected
|