Security Research

CVE-2024-46982 Next.js Cache Poisoning: silent hijacking of non-dynamic SSR pages

Thinking 2024-11-15 5 min read Research Dossier
#Vulnerability Analysis#Code Audit#Web Security
Dark panel showing Next.js cache layer being polluted by attacker flow

Next.js non-dynamic SSR pages do not isolate user-specific data at the cache layer. An attacker poisons the cache with a malicious Host header, and all subsequent users receive the poisoned response.

Unlock to view this content.