Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Next.js Vulnerability - CVE-2023-46298 - Vulnerability Database
Next.js

Next.js Vulnerability - CVE-2023-46298

High
Reference: CVE-2023-46298
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-46298
Title: Next.js Vulnerability
Overview:

Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN causing a denial of service to all users requesting the same URL via that CDN.