CVE-2025-31125

CVE-2025-31125 Vulnerability Detection Tool This is a Python script tool for detecting CVE-2025-31125 vulnerability. Author Information Author: 大智 Date: 2025-04-01 Features Supports single target detection Supports batch target detection Automatically saves detection results Colored output...

Path-Transversal-CVE-2025-31125-

Vite Exploit CVE-2025-31125 Description: Exploits path traversal in Vite Development Server's @fs endpoint CVE-2025-31125 to access sensitive files like /etc/passwd and /etc/hosts via crafted URLs. Created by Harsh Gupta. Usage: python viteexploit.py -u http://target.com python viteexploit.py -f...

Vitejs-exploit

Vite Exploit CVE-2025-31125 Description: Exploits path traversal in Vite Development Server's @fs endpoint CVE-2025-31125 to access sensitive files like /etc/passwd and /etc/hosts via crafted URLs. Created by Muhammad Waseem. Usage: python viteexploit.py -u http://target.com python viteexploit.py...

Exploit for CVE-2025-31125

Vite Exploit CVE-2025-31125 Description: Exploits path tr...

Security Bulletin: IBM Maximo Application Suite - Manage Component uses vite-5.4.12.tgz which is vulnerable to CVE-2025-31125

Summary Security Bulletin: IBM Maximo Application Suite - Manage Component uses vite-5.4.12.tgz which is vulnerable to CVE-2025-31125. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-31125 DESCRIPTION: Vite is a frontend tooling...

Security Bulletin: Multiple security vulnerabilities in Vite affect IBM Robotic Process Automation (CVE-2025-31125, CVE-2025-32395, CVE-2025-31486).

Summary Multiple security vulnerabilities in Vite affect IBM Robotic Process Automation CVE-2025-31125, CVE-2025-32395, CVE-2025-31486. Vite is used by IBM Robotic Process Automation as part of the UI framework. This bulletin identifies the fixes required to address these vulnerabilities...

VulnCheck KEV: CVE-2025-31125

Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network using --host or server.host config option are affected...

Exploit for CVE-2025-31125

CVE-2025-31125 Exploit - Vite WASM Import Path Traversal 🛡️ T...

CVE-2025-31125 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

CVE-2025-31125 vulnerabilities

Vulnerabilities for packages: vitess...

@adhd/backlog (>=1.0.0, <=1.0.19), @adhd/dispatch-cli (>=0.1.6, <=0.1.11) +442 more potentially affected by CVE-2025-31125 via vite (>=5.0.0, <=5.4.15)

vite NPM version =5.0.0, =1.0.0, =0.1.6, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =0.5.5 - @avorati/strapi-plugin-preview 1.0.1 - @beaker-tools/typescript-toolkit 1.3.0 and more Source cves: CVE-2025-31125 Source advisor...

@aklesky/vite-config (1.0.0), @aminnairi/react-translate (>=0.2.0, <=1.0.0) +42 more potentially affected by CVE-2025-31125 via vite (>=6.0.0, <=6.0.11)

vite NPM version =6.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =0.4.2, =0.1.10, =0.0.1, =5.0.0-alpha.32, =19.1.0-snapshot-1740051612326, =19.1.0-snapshot-1740051612326, =2.9.2, =2.9.2, =2.11.5 and more Source cves: CVE-2025-31125 Source advisory: OSV:GHSA-4R4M-QW57-CHR8...

@aicblock/cli (>=1.0.0, <=1.0.1), @angular-devkit/build-angular (>=19.2.1, <=20.0.0-next.3) +41 more potentially affected by CVE-2025-31125 via vite (>=6.2.0, <=6.2.3)

vite NPM version =6.2.0, =1.0.0, =19.2.1, =19.2.1, =0.55.0, =0.21.2-4.1, =1.0.0, =1.0.410, =3.8.0, =5.0.0-alpha.40, =1.0.0-next.1, =2.0.0-next.3 and more Source cves: CVE-2025-31125 Source advisory: GHSA-4R4M-QW57-CHR8...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +511 more potentially affected by CVE-2025-31125 via vite (>=4.0.0-beta.0, <=4.5.9)

vite NPM version =4.0.0-beta.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2025-31125 Source advisory: GHSA-4R4M-QW57-CHR8...

@angular-devkit/build-angular (>=19.2.0-next.2, <=19.2.0), @angular/build (>=19.2.0-next.2, <=19.2.0) +42 more potentially affected by CVE-2025-31125 via vite (>=6.1.0, <=6.1.2)

vite NPM version =6.1.0, =19.2.0-next.2, =19.2.0-next.2, =1.0.7, =2.12.0, =2.12.0, =11.24.0, =0.0.1739797164641, =1.0.0, =0.0.0-experimental-989cf02-20250217-d62ba1cb, =0.0.0-experimental-0580205-20250209-2be35102, =0.0.0-snapshot-08bd566ea55152626f488c12d32ebce7e35b812d,...

@adhd/backlog (>=1.0.0, <=1.0.19), @adhd/dispatch-cli (>=0.1.6, <=0.1.11) +442 more potentially affected by CVE-2025-31125 via vite (>=5.0.0, <=5.4.15)

vite NPM version =5.0.0, =1.0.0, =0.1.6, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =0.5.5 - @avorati/strapi-plugin-preview 1.0.1 - @beaker-tools/typescript-toolkit 1.3.0 and more Source cves: CVE-2025-31125 Source advisor...

@aklesky/vite-config (1.0.0), @aminnairi/react-translate (>=0.2.0, <=1.0.0) +42 more potentially affected by CVE-2025-31125 via vite (>=6.0.0, <=6.0.11)

vite NPM version =6.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =0.4.2, =0.1.10, =0.0.1, =5.0.0-alpha.32, =19.1.0-snapshot-1740051612326, =19.1.0-snapshot-1740051612326, =2.9.2, =2.9.2, =2.11.5 and more Source cves: CVE-2025-31125 Source advisory: GHSA-4R4M-QW57-CHR8...

CVE-2025-31125 Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query

Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network using --host or server.host config option are affected. This vulnerability is fixed in 6.2.4, 6.1.3,...

1food-menu (>=0.0.1, <=0.2.3), 7qb-cli (2.0.0) +2798 more potentially affected by CVE-2025-31125 via vite (>=0.4.0, <=4.5.9)

vite NPM version =0.4.0, =0.0.1, =1.0.0-canary.1, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.3, =1.0.1, =1.0.12, =0.0.4, =1.0.1, =1.0.7 and more Source cves: CVE-2025-31125 Source advisory: MEND:CVE-2025-31125...

@adhd/backlog (>=1.0.0, <=1.0.19), @adhd/dispatch-cli (>=0.1.6, <=0.1.11) +442 more potentially affected by CVE-2025-31125 via vite (>=5.0.0, <=5.4.15)

vite NPM version =5.0.0, =1.0.0, =0.1.6, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =0.5.5 - @avorati/strapi-plugin-preview 1.0.1 - @beaker-tools/typescript-toolkit 1.3.0 and more Source cves: CVE-2025-31125 Source advisor...