~ / search / GHSA-mv48-hcvh-8jj8

GHSA-mv48-hcvh-8jj8

Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service

Source: GitHub Advisory Database (reviewed) High CVE-2022-35204

Packages

EcosystemPackageAffectedFixed in
npm vite < 2.9.13 2.9.13
npm vite >= 3.0.0-alpha.0, < 3.0.0-beta.4 3.0.0-beta.4

Details

As written in the advisory (Markdown source, shown as plain text).

Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.

References

External links from the advisory. They lead to third-party sites.