CVE-2025-13984 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Permissive Cross-domain Security Policy with Untrusted Domains vulnerability in Drupal Next.Js allows Cross-Site Scripting (XSS).This issue affects Next.Js: fro…
Medium CVSS: 6.1

CVE-2025-13984

Permissive Cross-domain Security Policy with Untrusted Domains vulnerability in Drupal Next.Js allows Cross-Site Scripting (XSS).This issue affects Next.Js: from 0.0.0 before 1.6.4, from 2.0.0 before 2.0.1.
Vendor
Kanopi
Product
Next.js
CWE
CWE-942
Yayın Tarihi
2026-01-28 20:16:07
Güncelleme
2026-02-06 19:02:43
Source Identifier
mlhess@drupal.org
KEV Date Added
-

Kategoriler

CWE-942 Next.js MEDIUM Kanopi 2026

Referanslar

https://www.drupal.org/sa-contrib-2025-122