Threats tagged 'brew-vite-cve-2025-58752'

CVE-2025-58752 is a relative path traversal vulnerability in the Vite development server and preview server that allows serving arbitrary HTML files outside the intended root directory. This affects applications that expose the Vite dev server to the network and use appType 'spa' or 'mpa'. The vulnerability arises because certain middleware serving HTML files do not enforce file path restrictions, enabling attackers to retrieve sensitive HTML files from the filesystem. The vulnerability has a low CVSS score of 2.3 and affects Vite versions prior to 5.4.20.