What is the CVSS score of CVE-2023-46298?

CVE-2023-46298 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 1.3%.

Is there a public PoC exploit available for CVE-2023-46298?

Yes, a public proof-of-concept exploit is available for CVE-2023-46298. Prioritise patching immediately. EPSS: 1.3%.

Is there a patch available for CVE-2023-46298?

Yes, a patch is available for CVE-2023-46298. Update the affected software to the latest version immediately.

Next Js CVE-2023-46298

HIGH

2023-10-22 cve@mitre.org

Denial Of Service Next Js

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Oct 22, 2023 - 03:15 nvd

HIGH 7.5

DescriptionNVD

AnalysisAI

Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Technical ContextAI

Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN. Affected products include: Vercel Next.Js. Version information: before 13.4.20.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Next Js

View all

CVE-2024-34351 HIGH This Week POC

7.5 May 14

Next.js is a React framework that can provide building blocks to create web applications. Rated high severity (CVSS 7.5)

CVE-2018-6184 HIGH This Week POC

7.5 Jan 24

ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /_next request namespace. Rated high severity (CVSS 7.5),

CVE-2020-5284 MEDIUM This Month POC

4.3 Mar 30

Next.js versions before 9.3.2 have a directory traversal vulnerability. Rated medium severity (CVSS 4.3), this vulnerabi

CVE-2024-51479 HIGH This Week

7.5 Dec 17

Next.js is a React framework for building full-stack web applications. Rated high severity (CVSS 7.5), this vulnerabilit

CVE-2024-47831 HIGH This Week

7.5 Oct 14

Next.js is a React Framework for the Web. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no

CVE-2024-46982 HIGH This Week

7.5 Sep 17

Next.js is a React framework for building full-stack web applications. Rated high severity (CVSS 7.5), this vulnerabilit

CVE-2024-39693 HIGH This Week

7.5 Jul 10

Next.js is a React framework. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authenticat

CVE-2024-34350 HIGH This Week

7.5 May 14

Next.js is a React framework that can provide building blocks to create web applications. Rated high severity (CVSS 7.5)

CVE-2022-23646 HIGH This Week

7.5 Feb 17

Next.js is a React framework. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authenticat

CVE-2021-43803 HIGH This Week

7.5 Dec 10

Next.js is a React framework. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authenticat

CVE-2021-39178 MEDIUM This Month

6.1 Aug 31

Next.js is a React framework. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentic

CVE-2021-37699 MEDIUM This Month

6.1 Aug 12

Next.js is an open source website development framework to be used with the React library. Rated medium severity (CVSS 6

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

CVE-2023-46298 vulnerability details – vuln.today

Back

Next Js CVE-2023-46298

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More in Next Js

Same technique Denial Of Service

Share

External POC / Exploit Code