Beveiligingsadvies

CVE-2025-24010

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-01-20 15:53:30

Laatst bijgewerkt 2025-01-21 14:52:53

Toegewezen door GitHub_M

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Vite is a frontend tooling framework for javascript. Vite allowed any websites to send any requests to the development server and read the response due to default CORS settings and lack of validation on the Origin header for WebSocket connections. This vulnerability is fixed in 6.0.9, 5.4.12, and 4.5.6.

← Alle CVE's bekijken Bekijk op cve.org ↗