CVE-2022-35204

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service...

@aem-vite/import-rewriter (=5.0.1), @aem-vite/vite-aem-plugin (>=1.0.0 <=1.0.0-alpha.5) +200 more potentially affected by CVE-2022-35204 via vite (>=0.14.4 <=2.9.12)

vite NPM version =0.14.4, =1.0.0, =3.0.0-beta.5, =3.0.0-beta.2, =0.0.1, =1.0.16, =1.1.0-next.4, =0.0.0-experimental-17c6886-20220324, =0.0.0-canary-20220428124037, =0.1.5, =0.0.11, =0.0.12, =0.0.1, =0.1.5, =0.0.11, =0.0.16 and more Source cves: CVE-2022-35204 Source advisory: OSV:GHSA-MV48-HCVH-8...

CVE-2022-35204

creationtimestamp| type| source ---|---|--- 2022-08-18 22:29:46+00:00| seen| Telegram/MwyorbUc5bokzHzVZMlcZKn9pXcBSdT-1gYmYiG6p7Ob9TQ...

CVE-2022-35204

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service...

CVE-2022-35204

Vitejs Vite before v2.9.13 is vulnerable to directory traversal via a crafted URL to the victim’s service; update to v2.9.13 or later to resolve the issue (per PT-2022-22631).

CVE-2022-35204

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service...