CVE-2023-46298 - OpenCVE

Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Vercel	Next.js

Configuration 1 [-]

OR	cpe:2.3:a:vercel:next.js::::::node.js::*
	cpe:2.3:a:vercel:next.js:13.4.20:canary0::::node.js::*
	cpe:2.3:a:vercel:next.js:13.4.20:canary1::::node.js::*
	cpe:2.3:a:vercel:next.js:13.4.20:canary10::::node.js::*
	cpe:2.3:a:vercel:next.js:13.4.20:canary11::::node.js::*
	cpe:2.3:a:vercel:next.js:13.4.20:canary12::::node.js::*
	cpe:2.3:a:vercel:next.js:13.4.20:canary2::::node.js::*
	cpe:2.3:a:vercel:next.js:13.4.20:canary3::::node.js::*
	cpe:2.3:a:vercel:next.js:13.4.20:canary4::::node.js::*
	cpe:2.3:a:vercel:next.js:13.4.20:canary5::::node.js::*
	cpe:2.3:a:vercel:next.js:13.4.20:canary6::::node.js::*
	cpe:2.3:a:vercel:next.js:13.4.20:canary7::::node.js::*
	cpe:2.3:a:vercel:next.js:13.4.20:canary8::::node.js::*
	cpe:2.3:a:vercel:next.js:13.4.20:canary9::::node.js::*

No data.

References

Link	Providers
https://github.com/vercel/next.js/compare/v13.4.20-canary.12...v13.4.20-canary.13
https://github.com/vercel/next.js/issues/45301
https://github.com/vercel/next.js/pull/54732

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-10-22T00:00:00

Updated: 2024-09-12T17:50:34.208Z

Reserved: 2023-10-22T00:00:00

Link: CVE-2023-46298

Vulnrichment

Updated: 2024-08-02T20:45:40.898Z

NVD

Status : Analyzed

Published: 2023-10-22T03:15:07.630

Modified: 2023-10-28T03:30:11.740

Link: CVE-2023-46298

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vercel:next.js:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "925A4215-3FFD-4A31-912D-6A017816BAD7", "versionEndExcluding": "13.4.20", "vulnerable": true}, {"criteria": "cpe:2.3:a:vercel:next.js:13.4.20:canary0:*:*:*:node.js:*:*", "matchCriteriaId": "C3C8121C-0E9A-4603-BC95-D8587787D49B", "vulnerable": true}, {"criteria": "cpe:2.3:a:vercel:next.js:13.4.20:canary1:*:*:*:node.js:*:*", "matchCriteriaId": "38F01C08-9C2E-43AF-8DC2-151EB55CB359", "vulnerable": true}, {"criteria": "cpe:2.3:a:vercel:next.js:13.4.20:canary10:*:*:*:node.js:*:*", "matchCriteriaId": "2E022A19-C372-4115-B6A0-DD6142AAF0FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:vercel:next.js:13.4.20:canary11:*:*:*:node.js:*:*", "matchCriteriaId": "D54FE66E-F8A0-4E25-ADC1-EB8EF28C9D8C", "vulnerable": true}, {"criteria": "cpe:2.3:a:vercel:next.js:13.4.20:canary12:*:*:*:node.js:*:*", "matchCriteriaId": "3779A063-878E-4144-9D9C-23BB0682BE3D", "vulnerable": true}, {"criteria": "cpe:2.3:a:vercel:next.js:13.4.20:canary2:*:*:*:node.js:*:*", "matchCriteriaId": "1AE0F73C-E100-442E-BCFE-78883EC85159", "vulnerable": true}, {"criteria": "cpe:2.3:a:vercel:next.js:13.4.20:canary3:*:*:*:node.js:*:*", "matchCriteriaId": "F8598C69-A77F-489F-93D6-FD0C8147EE35", "vulnerable": true}, {"criteria": "cpe:2.3:a:vercel:next.js:13.4.20:canary4:*:*:*:node.js:*:*", "matchCriteriaId": "908890B1-AE61-4254-97C8-B20348E79ACC", "vulnerable": true}, {"criteria": "cpe:2.3:a:vercel:next.js:13.4.20:canary5:*:*:*:node.js:*:*", "matchCriteriaId": "7F8A969A-0ADC-4356-8AEC-72E5BEF4A9BB", "vulnerable": true}, {"criteria": "cpe:2.3:a:vercel:next.js:13.4.20:canary6:*:*:*:node.js:*:*", "matchCriteriaId": "D3C4F0AF-9456-4F0C-85BB-81B4F7E010E9", "vulnerable": true}, {"criteria": "cpe:2.3:a:vercel:next.js:13.4.20:canary7:*:*:*:node.js:*:*", "matchCriteriaId": "2D8432F9-8641-4EE5-A6A5-E2E79E4F7CB9", "vulnerable": true}, {"criteria": "cpe:2.3:a:vercel:next.js:13.4.20:canary8:*:*:*:node.js:*:*", "matchCriteriaId": "E94322EE-AF5F-40BC-82F0-8CD783D59B3C", "vulnerable": true}, {"criteria": "cpe:2.3:a:vercel:next.js:13.4.20:canary9:*:*:*:node.js:*:*", "matchCriteriaId": "A5A00595-2393-41CF-8D1A-9237BC5A8CD3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN."}, {"lang": "es", "value": "Next.js anterior a 13.4.20-canary.13 carece de un encabezado de control de cach\u00e9 y, por lo tanto, a veces una CDN puede almacenar en cach\u00e9 respuestas de captaci\u00f3n previa vac\u00edas, lo que provoca una denegaci\u00f3n de servicio a todos los usuarios que solicitan la misma URL a trav\u00e9s de esa CDN."}], "id": "CVE-2023-46298", "lastModified": "2023-10-28T03:30:11.740", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-10-22T03:15:07.630", "references": [{"source": "cve@mitre.org", "tags": ["Product"], "url": "https://github.com/vercel/next.js/compare/v13.4.20-canary.12...v13.4.20-canary.13"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "url": "https://github.com/vercel/next.js/issues/45301"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/vercel/next.js/pull/54732"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}