CVE-2024-34351

Next.js is a React framework that can provide building blocks to create web applications. A Server-Side Request Forgery (SSRF) vulnerability was identified in Next.js Server Actions. If the `Host` header is modified, and the below conditions are also met, an attacker may be able to make requests that appear to be originating from the Next.js application server itself. The required conditions are 1) Next.js is running in a self-hosted manner; 2) the Next.js application makes use of Server Actions; and 3) the Server Action performs a redirect to a relative path which starts with a `/`. This vulnerability was fixed in Next.js `14.1.1`.

• CWE-918

• https://github.com/vercel/next.js/commit/8f7a6ca7d21a97bc9f7a1bbe10427b5ad74b9085Patch
• https://github.com/vercel/next.js/pull/62561Issue Tracking, Patch
• https://github.com/vercel/next.js/security/advisories/GHSA-fr5h-rqp8-mj6gVendor Advisory
• https://github.com/vercel/next.js/commit/8f7a6ca7d21a97bc9f7a1bbe10427b5ad74b9085Patch
• https://github.com/vercel/next.js/pull/62561Issue Tracking, Patch
• https://github.com/vercel/next.js/security/advisories/GHSA-fr5h-rqp8-mj6gVendor Advisory

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-34345The CycloneDX JavaScript library contains the core functiona…8.1
• CVE-2024-34346Deno is a JavaScript, TypeScript, and WebAssembly runtime wi…9
• CVE-2024-34347@hoppscotch/cli is a CLI to run Hoppscotch Test Scripts in C…8.3
• CVE-2024-34349Sylius is an open source eCommerce platform. Prior to 1.12.1…4.8
• CVE-2024-3435A path traversal vulnerability exists in the 'save_settings'…8.4
• CVE-2024-34350Next.js is a React framework that can provide building block…7.5
• CVE-2024-343521Panel is an open source Linux server operation and maintena…7.5
• CVE-2024-34353The matrix-sdk-crypto crate, part of the Matrix Rust SDK pro…5.5
• CVE-2024-34354CMSaaSStarter is a SaaS template/boilerplate built with Svel…6.5
• CVE-2024-34355TYPO3 is an enterprise content management system. Starting i…5.4
• CVE-2024-34356TYPO3 is an enterprise content management system. Starting i…5.4
• CVE-2024-34357TYPO3 is an enterprise content management system. Starting i…5.4