Lucene search
+L

1 matches found

OSV
OSV
added 2025/02/04 7:36 p.m.20 views

CVE-2025-24963 Browser mode serves arbitrary files in vitest

Vitest is a testing framework powered by Vite. The screenshot-error handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by browser.api.host: true, an attacker can send a request to that handler from remote to get th...

5.9CVSS9AI score0.02297EPSS
SaveExploits0References6
Rows per page
Query Builder