writeups.xyz / Digging for SSRF in NextJS apps

Submitter : c2a

Date: 9 May 2024

Bounty : undisclosed

Vulnerabilities :

• SSRF
• Security Code Review

Programs :

• Vercel (NextJS)

Authors :

• Adam Kues (@Hash_kitten)
• Shubham Shah (@Infosec_au)

Link :
https://www.assetnote.io/resources/research/digging-for-ssrf-in-nextjs-apps