VDB
BDU%3A2025-03698
BDU%3A2025-03698
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость функции transformMiddleware механизма @fs локального сервера разработки приложений Vite, позволяющая нарушителю читать произвольные файлы
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Evan You | Vite |
Timeline
- Apr 2, 2025 CVE Published
References
- https://github.com/vitejs/vite/commit/315695e9d97cc6cfa7e6d9e0229fb50cdae3d9f4 url
- https://github.com/vitejs/vite/commit/807d7f06d33ab49c48a2a3501da3eea1906c0d41 url
- https://github.com/vitejs/vite/commit/92ca12dc79118bf66f2b32ff81ed09e0d0bd07ca url
- https://github.com/vitejs/vite/commit/f234b5744d8b74c95535a7b82cc88ed2144263c1 url
- https://github.com/4xura/CVE-2025-30108 url
- https://github.com/vitejs/vite/commit/80381c38d6f068b12e6e928cd3c616bd1d64803c advisory
- https://github.com/vitejs/vite/security/advisories/GHSA-x574-m823-4x7w advisory