Описание
Vite (French word for "quick", pronounced /vit/, like "veet") is a frontend build tooling to improve the frontend development experience.server.fs.deny does not deny requests for patterns with directories. This vulnerability has been patched in version(s) 5.2.6, 5.1.7, 5.0.13, 4.5.3, 3.2.10 and 2.9.18.
Ссылки
EPSS
5.9 Medium
CVSS3
Дефекты
Связанные уязвимости
Vite (French word for "quick", pronounced /vit/, like "veet") is a frontend build tooling to improve the frontend development experience.`server.fs.deny` does not deny requests for patterns with directories. This vulnerability has been patched in version(s) 5.2.6, 5.1.7, 5.0.13, 4.5.3, 3.2.10 and 2.9.18.
Vite's `server.fs.deny` did not deny requests for patterns with directories.
Уязвимость локального сервера разработки приложений Vite, связанная с недостатками контроля доступа, позволяющая нарушителю выполнить произвольный код
EPSS
5.9 Medium
CVSS3