Risk Disclosure: This website's content is not investment advice and offers no trading guidance or related services. Per regulations from the PBOC and other authorities, users must be aware of virtual currency risks. Contact us / [email protected] ICP License: 琼ICP备2022009338号
TechFlow news — SlowMist Chief Information Security Officer (CISO) 23pds reported a full-read SSRF vulnerability (CVE-2024-34351) discovered in the React web application framework Next.js, which could allow attackers to read arbitrary files on the server.
Notably, a significant number of cryptocurrency platforms use this framework. The official team has already released a patch; upgrading Next.js to the latest version v14.1.1 will fix the vulnerability.
M慢雾 CISO 23pds stated that a full-read SSRF vulnerability (CVE-2024-34351) has been discovered in the React web application framework Next.js, allowing attackers to exploit it to read arbitrary files on the server. Notably, a large number of cryptocurrency industry platforms use this framework. The official team has already released a patch; upgrading Next.js to the latest version v14.1.1 will fix the vulnerability.
Navigating Web3 tides with focused insights
