CVE-2022-36046
31.08.2022, 19:15
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict `unhandledRejection` exiting AND using next start or a [custom server](https://nextjs.org/docs/advanced-features/custom-server). Deployments on Vercel ([vercel.com](https://vercel.com/)) are not affected along with similar environments where `next-server` isn't being shared across requests.Enginsight
Vendor | Product | Version |
---|---|---|
vercel | next.js | 12.2.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-248 - Uncaught ExceptionAn exception is thrown from a function, but it is not caught.
- CWE-754 - Improper Check for Unusual or Exceptional ConditionsThe software does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the software.