6 matches found
VulnCheck KEV: CVE-2025-24963
Vitest is a testing framework powered by Vite. The screenshot-error handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by browser.api.host: true, an attacker can send a request to that handler from remote to get th...
CVE-2025-24963 Browser mode serves arbitrary files in vitest
Vitest is a testing framework powered by Vite. The screenshot-error handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by browser.api.host: true, an attacker can send a request to that handler from remote to get th...
CVE-2025-24963 Browser mode serves arbitrary files in vitest
Vitest is a testing framework powered by Vite. The screenshot-error handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by browser.api.host: true, an attacker can send a request to that handler from remote to get th...
CVE-2025-24963 Browser mode serves arbitrary files in vitest
Vitest is a testing framework powered by Vite. The screenshot-error handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by browser.api.host: true, an attacker can send a request to that handler from remote to get th...
CVE-2025-24963
CVE-2025-24963 concerns Vitest browser-mode HTTP server. The vulnerability arises from the __screenshot-error handler, which can respond with arbitrary files from the host filesystem when the browser-mode server is exposed to the network (e.g., via browser.api.host: true). Under these conditions,...
CVE-2025-24963
creationtimestamp| type| source ---|---|--- 2025-02-04 06:23:56+00:00| published-proof-of-concept| https://github.com/vitest-dev/vitest/security/advisories/GHSA-8gvc-j273-4wm5 2025-02-04 20:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheur3fp7v2c 2025-02-04...