Lucene search
HistoryAug 18, 2022 - 7:15 p.m.
CVE-2022-35204
vitejs
vite
cve-2022-35204
directory traversal
security issue
nvd
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
4.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.3%
Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim’s service.
Affected configurations
Node
vitejsviteRange<2.9.13node.js
| CPE | Name | Operator | Version |
|---|---|---|---|
| vitejs:vite | vitejs vite | lt | 2.9.13 |
References
Social References
More
Related
cvelist
cvelist
CVE-2022-35204
2022-08-18 18:15:21
nvd
nvd
CVE-2022-35204
2022-08-18 19:15:14
osv
osv
Vitejs Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service
2022-08-19 00:00:20
CVE-2022-35204
2022-08-18 19:15:14
prion
prion
Directory traversal
2022-08-18 19:15:00
github
github
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
4.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.3%
Related for CVE-2022-35204