Description

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.

Remediation

References

https://github.com/vitejs/vite/issues/8498

https://github.com/vitejs/vite/releases/tag/v2.9.13

https://github.com/vitejs/vite/releases/tag/v3.0.0-beta.4

Related Vulnerabilities

CVE-2021-32854 Vulnerability in maven package org.webjars.npm:textangular

CVE-2022-25918 Vulnerability in npm package shescape

CVE-2020-7777 Vulnerability in npm package jsen

CVE-2023-46502 Vulnerability in maven package org.opencrx:opencrx-core

CVE-2022-39381 Vulnerability in npm package muhammara

Severity

Medium

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Tags

Exploit Issue Tracking Patch Third Party Advisory Release Notes