Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-47831

Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service (DoS) condition which could lead to excessive CPU consumption. Neither the `next.config.js` file that is configured with `images.unoptimized` set to `true` or `images.loader` set to a non-default value nor the Next.js application that is hosted on Vercel are affected. This issue was fully patched in Next.js `14.2.7`. As a workaround, ensure that the `next.config.js` file has either `images.unoptimized`, `images.loader` or `images.loaderFile` assigned.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.2%
CVSS Severity
CVSS v3 Score 5.9
Products affected by CVE-2024-47831
  • Vercel » Next.js » Version: 10.0.0
    cpe:2.3:a:vercel:next.js:10.0.0
  • Vercel » Next.js » Version: 10.0.1
    cpe:2.3:a:vercel:next.js:10.0.1
  • Vercel » Next.js » Version: 10.0.10
    cpe:2.3:a:vercel:next.js:10.0.10
  • Vercel » Next.js » Version: 10.0.2
    cpe:2.3:a:vercel:next.js:10.0.2
  • Vercel » Next.js » Version: 10.0.3
    cpe:2.3:a:vercel:next.js:10.0.3
  • Vercel » Next.js » Version: 10.0.4
    cpe:2.3:a:vercel:next.js:10.0.4
  • Vercel » Next.js » Version: 10.0.5
    cpe:2.3:a:vercel:next.js:10.0.5
  • Vercel » Next.js » Version: 10.0.6
    cpe:2.3:a:vercel:next.js:10.0.6
  • Vercel » Next.js » Version: 10.0.7
    cpe:2.3:a:vercel:next.js:10.0.7
  • Vercel » Next.js » Version: 10.0.8
    cpe:2.3:a:vercel:next.js:10.0.8
  • Vercel » Next.js » Version: 10.0.9
    cpe:2.3:a:vercel:next.js:10.0.9
  • Vercel » Next.js » Version: 10.1.0
    cpe:2.3:a:vercel:next.js:10.1.0
  • Vercel » Next.js » Version: 10.1.1
    cpe:2.3:a:vercel:next.js:10.1.1
  • Vercel » Next.js » Version: 10.1.2
    cpe:2.3:a:vercel:next.js:10.1.2
  • Vercel » Next.js » Version: 10.1.3
    cpe:2.3:a:vercel:next.js:10.1.3
  • Vercel » Next.js » Version: 10.1.4
    cpe:2.3:a:vercel:next.js:10.1.4
  • Vercel » Next.js » Version: 10.2.0
    cpe:2.3:a:vercel:next.js:10.2.0
  • Vercel » Next.js » Version: 10.2.1
    cpe:2.3:a:vercel:next.js:10.2.1
  • Vercel » Next.js » Version: 10.2.2
    cpe:2.3:a:vercel:next.js:10.2.2
  • Vercel » Next.js » Version: 10.2.3
    cpe:2.3:a:vercel:next.js:10.2.3
  • Vercel » Next.js » Version: 10.2.4
    cpe:2.3:a:vercel:next.js:10.2.4
  • Vercel » Next.js » Version: 11.0.0
    cpe:2.3:a:vercel:next.js:11.0.0
  • Vercel » Next.js » Version: 11.0.1
    cpe:2.3:a:vercel:next.js:11.0.1
  • Vercel » Next.js » Version: 11.0.2
    cpe:2.3:a:vercel:next.js:11.0.2
  • Vercel » Next.js » Version: 11.1.0
    cpe:2.3:a:vercel:next.js:11.1.0
  • Vercel » Next.js » Version: 11.1.1
    cpe:2.3:a:vercel:next.js:11.1.1
  • Vercel » Next.js » Version: 11.1.2
    cpe:2.3:a:vercel:next.js:11.1.2
  • Vercel » Next.js » Version: 11.1.3
    cpe:2.3:a:vercel:next.js:11.1.3
  • Vercel » Next.js » Version: 11.1.4
    cpe:2.3:a:vercel:next.js:11.1.4
  • Vercel » Next.js » Version: 12.0.0
    cpe:2.3:a:vercel:next.js:12.0.0
  • Vercel » Next.js » Version: 12.0.1
    cpe:2.3:a:vercel:next.js:12.0.1
  • Vercel » Next.js » Version: 12.0.10
    cpe:2.3:a:vercel:next.js:12.0.10
  • Vercel » Next.js » Version: 12.0.11
    cpe:2.3:a:vercel:next.js:12.0.11
  • Vercel » Next.js » Version: 12.0.2
    cpe:2.3:a:vercel:next.js:12.0.2
  • Vercel » Next.js » Version: 12.0.3
    cpe:2.3:a:vercel:next.js:12.0.3
  • Vercel » Next.js » Version: 12.0.4
    cpe:2.3:a:vercel:next.js:12.0.4
  • Vercel » Next.js » Version: 12.0.5
    cpe:2.3:a:vercel:next.js:12.0.5
  • Vercel » Next.js » Version: 12.0.6
    cpe:2.3:a:vercel:next.js:12.0.6
  • Vercel » Next.js » Version: 12.0.7
    cpe:2.3:a:vercel:next.js:12.0.7
  • Vercel » Next.js » Version: 12.0.8
    cpe:2.3:a:vercel:next.js:12.0.8
  • Vercel » Next.js » Version: 12.0.9
    cpe:2.3:a:vercel:next.js:12.0.9
  • Vercel » Next.js » Version: 12.1.0
    cpe:2.3:a:vercel:next.js:12.1.0
  • Vercel » Next.js » Version: 12.1.1
    cpe:2.3:a:vercel:next.js:12.1.1
  • Vercel » Next.js » Version: 12.1.2
    cpe:2.3:a:vercel:next.js:12.1.2
  • Vercel » Next.js » Version: 12.1.3
    cpe:2.3:a:vercel:next.js:12.1.3
  • Vercel » Next.js » Version: 12.1.4
    cpe:2.3:a:vercel:next.js:12.1.4
  • Vercel » Next.js » Version: 12.1.5
    cpe:2.3:a:vercel:next.js:12.1.5
  • Vercel » Next.js » Version: 12.1.6
    cpe:2.3:a:vercel:next.js:12.1.6
  • Vercel » Next.js » Version: 12.1.7
    cpe:2.3:a:vercel:next.js:12.1.7
  • Vercel » Next.js » Version: 12.2.0
    cpe:2.3:a:vercel:next.js:12.2.0
  • Vercel » Next.js » Version: 12.2.1
    cpe:2.3:a:vercel:next.js:12.2.1
  • Vercel » Next.js » Version: 12.2.2
    cpe:2.3:a:vercel:next.js:12.2.2
  • Vercel » Next.js » Version: 12.2.3
    cpe:2.3:a:vercel:next.js:12.2.3
  • Vercel » Next.js » Version: 12.2.4
    cpe:2.3:a:vercel:next.js:12.2.4
  • Vercel » Next.js » Version: 12.2.5
    cpe:2.3:a:vercel:next.js:12.2.5
  • Vercel » Next.js » Version: 12.2.6
    cpe:2.3:a:vercel:next.js:12.2.6
  • Vercel » Next.js » Version: 12.3.0
    cpe:2.3:a:vercel:next.js:12.3.0
  • Vercel » Next.js » Version: 12.3.1
    cpe:2.3:a:vercel:next.js:12.3.1
  • Vercel » Next.js » Version: 12.3.2
    cpe:2.3:a:vercel:next.js:12.3.2
  • Vercel » Next.js » Version: 12.3.3
    cpe:2.3:a:vercel:next.js:12.3.3
  • Vercel » Next.js » Version: 12.3.4
    cpe:2.3:a:vercel:next.js:12.3.4
  • Vercel » Next.js » Version: 13.0.0
    cpe:2.3:a:vercel:next.js:13.0.0
  • Vercel » Next.js » Version: 13.0.1
    cpe:2.3:a:vercel:next.js:13.0.1
  • Vercel » Next.js » Version: 13.0.2
    cpe:2.3:a:vercel:next.js:13.0.2
  • Vercel » Next.js » Version: 13.0.3
    cpe:2.3:a:vercel:next.js:13.0.3
  • Vercel » Next.js » Version: 13.0.4
    cpe:2.3:a:vercel:next.js:13.0.4
  • Vercel » Next.js » Version: 13.0.5
    cpe:2.3:a:vercel:next.js:13.0.5
  • Vercel » Next.js » Version: 13.0.6
    cpe:2.3:a:vercel:next.js:13.0.6
  • Vercel » Next.js » Version: 13.0.7
    cpe:2.3:a:vercel:next.js:13.0.7
  • Vercel » Next.js » Version: 13.0.8
    cpe:2.3:a:vercel:next.js:13.0.8
  • Vercel » Next.js » Version: 13.1.0
    cpe:2.3:a:vercel:next.js:13.1.0
  • Vercel » Next.js » Version: 13.1.1
    cpe:2.3:a:vercel:next.js:13.1.1
  • Vercel » Next.js » Version: 13.1.2
    cpe:2.3:a:vercel:next.js:13.1.2
  • Vercel » Next.js » Version: 13.1.3
    cpe:2.3:a:vercel:next.js:13.1.3
  • Vercel » Next.js » Version: 13.1.4
    cpe:2.3:a:vercel:next.js:13.1.4
  • Vercel » Next.js » Version: 13.1.5
    cpe:2.3:a:vercel:next.js:13.1.5
  • Vercel » Next.js » Version: 13.1.6
    cpe:2.3:a:vercel:next.js:13.1.6
  • Vercel » Next.js » Version: 13.1.7
    cpe:2.3:a:vercel:next.js:13.1.7
  • Vercel » Next.js » Version: 13.2.0
    cpe:2.3:a:vercel:next.js:13.2.0
  • Vercel » Next.js » Version: 13.2.1
    cpe:2.3:a:vercel:next.js:13.2.1
  • Vercel » Next.js » Version: 13.2.2
    cpe:2.3:a:vercel:next.js:13.2.2
  • Vercel » Next.js » Version: 13.2.3
    cpe:2.3:a:vercel:next.js:13.2.3
  • Vercel » Next.js » Version: 13.2.4
    cpe:2.3:a:vercel:next.js:13.2.4
  • Vercel » Next.js » Version: 13.2.5
    cpe:2.3:a:vercel:next.js:13.2.5
  • Vercel » Next.js » Version: 13.3.0
    cpe:2.3:a:vercel:next.js:13.3.0
  • Vercel » Next.js » Version: 13.3.1
    cpe:2.3:a:vercel:next.js:13.3.1
  • Vercel » Next.js » Version: 13.3.2
    cpe:2.3:a:vercel:next.js:13.3.2
  • Vercel » Next.js » Version: 13.3.3
    cpe:2.3:a:vercel:next.js:13.3.3
  • Vercel » Next.js » Version: 13.3.4
    cpe:2.3:a:vercel:next.js:13.3.4
  • Vercel » Next.js » Version: 13.3.5
    cpe:2.3:a:vercel:next.js:13.3.5
  • Vercel » Next.js » Version: 13.4.0
    cpe:2.3:a:vercel:next.js:13.4.0
  • Vercel » Next.js » Version: 13.4.1
    cpe:2.3:a:vercel:next.js:13.4.1
  • Vercel » Next.js » Version: 13.4.10
    cpe:2.3:a:vercel:next.js:13.4.10
  • Vercel » Next.js » Version: 13.4.11
    cpe:2.3:a:vercel:next.js:13.4.11
  • Vercel » Next.js » Version: 13.4.12
    cpe:2.3:a:vercel:next.js:13.4.12
  • Vercel » Next.js » Version: 13.4.13
    cpe:2.3:a:vercel:next.js:13.4.13
  • Vercel » Next.js » Version: 13.4.14
    cpe:2.3:a:vercel:next.js:13.4.14
  • Vercel » Next.js » Version: 13.4.15
    cpe:2.3:a:vercel:next.js:13.4.15
  • Vercel » Next.js » Version: 13.4.16
    cpe:2.3:a:vercel:next.js:13.4.16
  • Vercel » Next.js » Version: 13.4.17
    cpe:2.3:a:vercel:next.js:13.4.17
  • Vercel » Next.js » Version: 13.4.18
    cpe:2.3:a:vercel:next.js:13.4.18
  • Vercel » Next.js » Version: 13.4.19
    cpe:2.3:a:vercel:next.js:13.4.19
  • Vercel » Next.js » Version: 13.4.2
    cpe:2.3:a:vercel:next.js:13.4.2
  • Vercel » Next.js » Version: 13.4.20
    cpe:2.3:a:vercel:next.js:13.4.20
  • Vercel » Next.js » Version: 13.4.3
    cpe:2.3:a:vercel:next.js:13.4.3
  • Vercel » Next.js » Version: 13.4.4
    cpe:2.3:a:vercel:next.js:13.4.4
  • Vercel » Next.js » Version: 13.4.5
    cpe:2.3:a:vercel:next.js:13.4.5
  • Vercel » Next.js » Version: 13.4.6
    cpe:2.3:a:vercel:next.js:13.4.6
  • Vercel » Next.js » Version: 13.4.7
    cpe:2.3:a:vercel:next.js:13.4.7
  • Vercel » Next.js » Version: 13.4.8
    cpe:2.3:a:vercel:next.js:13.4.8
  • Vercel » Next.js » Version: 13.4.9
    cpe:2.3:a:vercel:next.js:13.4.9
  • Vercel » Next.js » Version: 13.5.0
    cpe:2.3:a:vercel:next.js:13.5.0
  • Vercel » Next.js » Version: 13.5.1
    cpe:2.3:a:vercel:next.js:13.5.1
  • Vercel » Next.js » Version: 13.5.2
    cpe:2.3:a:vercel:next.js:13.5.2
  • Vercel » Next.js » Version: 13.5.3
    cpe:2.3:a:vercel:next.js:13.5.3
  • Vercel » Next.js » Version: 13.5.4
    cpe:2.3:a:vercel:next.js:13.5.4
  • Vercel » Next.js » Version: 13.5.5
    cpe:2.3:a:vercel:next.js:13.5.5
  • Vercel » Next.js » Version: 13.5.6
    cpe:2.3:a:vercel:next.js:13.5.6
  • Vercel » Next.js » Version: 13.5.7
    cpe:2.3:a:vercel:next.js:13.5.7
  • Vercel » Next.js » Version: 14.0.0
    cpe:2.3:a:vercel:next.js:14.0.0
  • Vercel » Next.js » Version: 14.0.1
    cpe:2.3:a:vercel:next.js:14.0.1


Contact Us

Shodan ® - All rights reserved