CVE-2022-35204: Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.

PriorityP420medium4.3CVSS 3.1

AVNACLPRNUIRSUCLINAN

EPSS

1.08%

60.8th percentile

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
vitejs	vite	< 2.9.13	2.9.13
vitejs	vite	>= 0 < 2.9.13	2.9.13
vitejs	vite	>= 3.0.0-alpha.0 < 3.0.0-beta.4	3.0.0-beta.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.