7.5
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
CVE-2025-30208 Using a special raw import query string on a vite dev server, a attacker can read arbitrary files Summary of the CVE Vite dev servers before 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10 can bypass the server.fs.deny file access checks for...
Basic Information
ID
9349E804-9874-5D40-A4D5-7FAE1725C5AA
Published
Jun 16, 2026 at 14:25
Modified
Jun 16, 2026 at 14:30