CVE-2020-5284 Scanner
CVE-2020-5284 scanner - Directory Traversal vulnerability in Next.js
Used 2.4k times · 3.4k assets checked · url
CVE
CVE-2020-5284
4.4
CVSSmedium
Exploitable remotely over the internet · low-privilege account sufficient · user interaction needed.
Description
Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access files in the dist directory (.next). This does not affect files outside of the dist directory (.next). In general, the dist directory only holds build assets unless your application intentionally stores other assets under this directory. This issue is fixed in version 9.3.2.
Attack Vector
Network
Privileges Req.
Low
User Interaction
Required
next.js
Updated Oct 24, 2026View on NVD →
S4E scanner
CVE history: next.js
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →