CVE-2026-64645

Katalog CVE

CVSS 6.1 · Medium EPSS 0,41%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada vercel next.js. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a rewrites() or redirects() rule that builds its external destination hostname from request-controlled input can be pointed at an arbitrary hostname, regardless of the rule's hostname suffix. For a rewrite, Next.js proxies the request to that arbitrary host and serves the response from the application's origin, leading to Server-Side Request forgery. A redirects() rule configured this way is vulnerable to an Open Redirect. This issue has been fixed in versions 15.5.21 and 16.2.11.

Rincian

Terbit di NVD

27 Juli 2026

Terakhir diubah

29 Juli 2026

Status NVD

Analyzed

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

0,41% peluang dieksploitasi; lebih tinggi dari 33,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/vercel/next.js/security/advisories/GHSA-p9j2-gv94-2wf4 mitigasi · advisory vendor
• https://github.com/vercel/next.js/commit/35f501357e9b0fe7c950b0d6aa8fcf5343f707e9 patch
• https://github.com/vercel/next.js/commit/d3033266c6dff23f7be71e19341fe3a8c6e2c599 patch
• https://github.com/vercel/next.js/releases/tag/v15.5.21 product · release notes
• https://github.com/vercel/next.js/releases/tag/v16.2.11 product · release notes