Description

Vite is a frontend build tool. This version contains an arbitrary file read vulnerability. Successful exploitation of this vulnerability can result in takeover of the server.

Remediation

Upgrade to the latest version of Vite

References

GitHub Security Advisory for CVE-2025-30208

GitHub Security Advisory for CVE-2025-31125

Related Vulnerabilities

Moodle Uncontrolled Resource Consumption Vulnerability (CVE-2020-25630)

Nginx CVE-2009-4487 Vulnerability (CVE-2009-4487)

Django Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-33203)

OpenSSL Cryptographic Issues Vulnerability (CVE-2011-1945)

Django Resource Management Errors Vulnerability (CVE-2015-5963)

Severity

High

Classification

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Arbitrary File Read Known Vulnerabilities CWE-200 CVE-2025-30208 CVE-2025-31125