REDHAT-BUG-2454387: SSRF
Next.js is a React framework that can provide building blocks to create web applications. A Server-Side Request Forgery (SSRF) vulnerability was identified in Next.js Server Actions. If the Host header is modified, and the below conditions are also met, an attacker may be able to make requests that appear to be originating from the Next.js application server itself. The required conditions are 1) Next.js is running in a self-hosted manner; 2) the Next.js application makes use of Server Actions; and 3) the Server Action performs a redirect to a relative path which starts with a /. This vulnerability was fixed in Next.js 14.1.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2454387?
The severity of REDHAT-BUG-2454387 is classified as high due to the potential for Server-Side Request Forgery (SSRF) attacks.
How do I fix REDHAT-BUG-2454387?
To fix REDHAT-BUG-2454387, upgrade Next.js to version 14.1.1 or later to mitigate the SSRF vulnerability.
What specific vulnerability is described in REDHAT-BUG-2454387?
REDHAT-BUG-2454387 describes a Server-Side Request Forgery (SSRF) vulnerability in Next.js Server Actions when the 'Host' header is modified.
Which versions of Next.js are affected by REDHAT-BUG-2454387?
Next.js versions below 14.1.1 are affected by REDHAT-BUG-2454387.
What are the implications of exploiting REDHAT-BUG-2454387?
Exploiting REDHAT-BUG-2454387 may allow an attacker to send unauthorized requests to internal resources, potentially compromising application security.