.. / CVE-2024-34351

• SSRF
• Nuclei
• Web

Exploit for Next.js - Server Side Request Forgery (SSRF) (CVE-2024-34351)

Description:

Next.Js, inferior to version 14.1.1, have its image optimization built-in component prone to SSRF.

Nuclei Template

View the template here CVE-2024-34351.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-34351.yaml

References: