CVE-2022-35204

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service...

@aem-vite/import-rewriter (5.0.1), @aem-vite/vite-aem-plugin (>=1.0.0-alpha.1, <=1.0.0) +191 more potentially affected by CVE-2022-35204 via vite (>=2.0.0-beta.4, <=2.9.12)

vite NPM version =2.0.0-beta.4, =1.0.0-alpha.1, =3.0.0-beta.5, =3.0.0-beta.2, =1.0.16, =1.1.0-next.4, =0.0.0-experimental-17c6886-20220324, =0.0.0-canary-20220428124037, =0.1.5, =0.0.11, =0.0.12, =0.0.1, =0.1.5, =0.0.11, =0.0.16 and more Source cves: CVE-2022-35204 Source advisory:...

@aem-vite/import-rewriter (5.0.1), @aem-vite/vite-aem-plugin (>=1.0.0-alpha.1, <=1.0.0) +191 more potentially affected by CVE-2022-35204 via vite (>=2.0.0-beta.4, <=2.9.12)

vite NPM version =2.0.0-beta.4, =1.0.0-alpha.1, =3.0.0-beta.5, =3.0.0-beta.2, =1.0.16, =1.1.0-next.4, =0.0.0-experimental-17c6886-20220324, =0.0.0-canary-20220428124037, =0.1.5, =0.0.11, =0.0.12, =0.0.1, =0.1.5, =0.0.11, =0.0.16 and more Source cves: CVE-2022-35204 Source advisory:...

@bn-digital/vite (>=1.11.2, <=1.11.4), purplet (>=2.0.0-next-pr55.3, <=2.0.0-next.18) +2 more potentially affected by CVE-2022-35204 via vite (>=3.0.0-alpha.2, <=3.0.0-alpha.14)

vite NPM version =3.0.0-alpha.2, =1.11.2, =2.0.0-next-pr55.3, =0.4.0, =0.1.0, =0.3.0 Source cves: CVE-2022-35204 Source advisory: OSV:GHSA-MV48-HCVH-8JJ8...

CVE-2022-35204

creationtimestamp| type| source ---|---|--- 2022-08-18 22:29:46+00:00| seen| Telegram/MwyorbUc5bokzHzVZMlcZKn9pXcBSdT-1gYmYiG6p7Ob9TQ...

CVE-2022-35204

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service...

@aem-vite/import-rewriter (5.0.1), @aem-vite/vite-aem-plugin (>=1.0.0-alpha.1, <=1.0.0) +222 more potentially affected by CVE-2022-35204 via vite (>=0.4.0, <=2.9.12)

vite NPM version =0.4.0, =1.0.0-alpha.1, =3.0.0-beta.5, =3.0.0-beta.2, =0.0.1, =1.0.16, =1.1.0-next.4, =0.0.0-experimental-17c6886-20220324, =0.0.0-canary-20220428124037, =0.1.5, =0.0.11, =0.0.12, =0.0.1, =0.1.5, =0.1.11 and more Source cves: CVE-2022-35204 Source advisory: MEND:CVE-2022-35204...

CVE-2022-35204

Vitejs Vite before v2.9.13 is vulnerable to directory traversal via a crafted URL to the victim’s service; update to v2.9.13 or later to resolve the issue (per PT-2022-22631).

CVE-2022-35204

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service...