Unauthorized File Exposure

🗓️ 09 Apr 2025 04:20:14Reported by Veracode Vulnerability DatabaseType

Vite is vulnerable to Unauthorized File Exposure due to improper file access from the dev server.

Reporter	Title	Published	Views	Family All 43
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Vite affect IBM Robotic Process Automation (CVE-2025-31125, CVE-2025-32395, CVE-2025-31486).	16 Jun 202522:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Manage Component uses vite-5.4.12.tgz which is vulnerable to CVE-2025-31125	27 Jun 202512:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant IDE Extensions	28 Aug 202515:51	–	ibm
GithubExploit	Exploit for CVE-2025-31125	13 Jul 202516:42	–	githubexploit
GithubExploit	Exploit for CVE-2025-30208	24 Apr 202510:53	–	githubexploit
GithubExploit	Exploit for CVE-2025-31125	12 Sep 202522:20	–	githubexploit
GithubExploit	Exploit for CVE-2025-30208	31 Mar 202513:43	–	githubexploit
GithubExploit	Exploit for CVE-2025-30208	26 Mar 202510:26	–	githubexploit
GithubExploit	Exploit for CVE-2025-31125	7 May 202507:45	–	githubexploit

Vulners

Node

vitejs viteRange2.9.0–5.4.9js

vitejs viteRange2.0.0-alpha.1–4.5.10js

vitejs viteRange5.0.0-beta.0–5.4.15js

vitejs viteRange6.0.0-alpha.0–6.0.12js

vitejs viteRange6.1.0-beta.0–6.1.2js

vitejs viteRange6.2.0-beta.0–6.2.3js

Source	Link
github	www.github.com/vitejs/vite/commit/b627c50d359f3bd9b602408fbbf462cf4a2f019c
github	www.github.com/vitejs/vite/commit/26e1764d54e7440d90226ebb82acbed457807d30
github	www.github.com/vitejs/vite/commit/1487f393f32df452d31640491d3ccfbcde359c1d
github	www.github.com/vitejs/vite/commit/7a4fabab6a3aa24c89144e15a13d78f92b52e588
github	www.github.com/vitejs/vite/commit/59673137c45ac2bcfad1170d954347c1a17ab949
github	www.github.com/vitejs/vite/commit/45b00c987c092b8032ebccdc4db17398e3b4d573
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
github	www.github.com/advisories/GHSA-4r4m-qw57-chr8
github	www.github.com/vitejs/vite/security/advisories/GHSA-4r4m-qw57-chr8
github	www.github.com/vitejs/vite/security/advisories/GHSA-4r4m-qw57-chr8

23 Jan 2026 19:17Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.15.3 - 7.5

EPSS0.83244

SSVC