Lucene search
+L

1 matches found

OSV
OSV
added 2024/04/03 4:46 p.m.13 views

GHSA-8JHW-289H-JH2G Vite's `server.fs.deny` did not deny requests for patterns with directories.

Summary Vite dev server option server.fs.deny did not deny requests for patterns with directories. An example of such a pattern is /foo//. Impact Only apps setting a custom server.fs.deny that includes a pattern with directories, and explicitly exposing the Vite dev server to the network using...

5.9CVSS5.8AI score0.00711EPSS
SaveExploits0References9
Rows per page
Query Builder