High · 8.6 CVE-2022-35204 EUVD-2022-6589GHSA-mv48-hcvh-8jj8

Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service

Published Aug 18, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.

Ecosystem	Package	Affected	Fixed	Record
npm	vite	< 2.9.13	2.9.13	GHSA-mv48-hcvh-8jj8
npm	vite	>= 3.0.0-alpha.0, < 3.0.0-beta.4	3.0.0-beta.4	GHSA-mv48-hcvh-8jj8