Description
Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.
Remediation
References
https://github.com/vitejs/vite/issues/8498
https://github.com/vitejs/vite/releases/tag/v2.9.13
https://github.com/vitejs/vite/releases/tag/v3.0.0-beta.4
Related Vulnerabilities
CVE-2023-31579 Vulnerability in maven package top.tangyh.basic:lamp-util
CVE-2020-36380 Vulnerability in npm package aaptjs
CVE-2022-21803 Vulnerability in maven package org.webjars.npm:nconf
CVE-2022-39243 Vulnerability in maven package com.zaxxer:nuprocess
CVE-2021-42767 Vulnerability in maven package org.neo4j.procedure:apoc