-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe commit 20d0595 explicitly adds cache-control headers to empty prefetch responses in base-server.ts. The vulnerability stemmed from missing cache control directives in these responses. The affected code path handles prefetch requests and returns empty JSON responses without proper caching instructions, which Cloudflare and other CDNs would interpret as cacheable. The fix directly addresses this by adding 'no-cache' directives, indicating this was the vulnerable code path.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| next | npm | >= 0.9.9, < 13.4.20-canary.13 | 13.4.20-canary.13 |