Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service

보통 4.3CVE-2022-35204 · GHSA-mv48-hcvh-8jj8 · Published 18/08/2022 · updated 17/06/2026

요약

Package	Affected versions	Patched versions
vite vitejs	`< 2.9.13`	`2.9.13`
vite npm	`≥ 3.0.0-alpha.0, < 3.0.0-beta.4< 2.9.13`	`3.0.0-beta.42.9.13`

Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.

NVD description

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 2.9.13

2.9.13

npm

≥ 3.0.0-alpha.0, < 3.0.0-beta.4< 2.9.13

3.0.0-beta.42.9.13

vite의 다른 취약점

모두 보기 →