Beveiligingsadvies

CVE-2025-24360

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-01-25 00:49:09
Laatst bijgewerkt 2025-02-12 20:41:32
Toegewezen door GitHub_M
CVSS-score 5.3
Status PUBLISHED

Beschrijving

Nuxt is an open-source web development framework for Vue.js. Starting in version 3.8.1 and prior to version 3.15.3, Nuxt allows any websites to send any requests to the development server and read the response due to default CORS settings. Users with the default server.cors option using Vite builder may get the source code stolen by malicious websites. Version 3.15.3 fixes the vulnerability.