CVE-2022-35204

2022-08-1819:15:14

Google

osv.dev

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.3%

JSON

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim’s service.

CPENameOperatorVersion
viteeq2.0.0-beta.38
viteeq[email protected]
viteeq2.9.0-beta.9
viteeq2.6.2
viteeq2.0.0-beta.33
viteeq[email protected]
viteeq[email protected]
viteeq[email protected]
viteeq2.7.0-beta.3
viteeq2.0.0-beta.49

Name	Operator	Version
vite	eq	2.0.0-beta.38
vite	eq	[email protected]
vite	eq	2.9.0-beta.9
vite	eq	2.6.2
vite	eq	2.0.0-beta.33
vite	eq	[email protected]
vite	eq	[email protected]
vite	eq	[email protected]
vite	eq	2.7.0-beta.3
vite	eq	2.0.0-beta.49