Description

Vite is a frontend build tool. This version contains an arbitrary file read vulnerability. Successful exploitation of this vulnerability can result in takeover of the server.

Remediation

Upgrade to the latest version of Vite

References

GitHub Security Advisory for CVE-2025-30208

GitHub Security Advisory for CVE-2025-31125

Related Vulnerabilities

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6634)

Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-32470)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-3455)

MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-0882)

Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-23969)

Severity

High

Classification

CVE-2025-30208 CVE-2025-31125 CWE-200 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Arbitrary File Read Known Vulnerabilities