CVE-2024-31207 Common Vulnerabilities and Exposures

Upstream information

CVE-2024-31207 at MITRE

Description

Vite (French word for "quick", pronounced /vit/, like "veet") is a frontend build tooling to improve the frontend development experience.`server.fs.deny` does not deny requests for patterns with directories. This vulnerability has been patched in version(s) 5.2.6, 5.1.7, 5.0.13, 4.5.3, 3.2.10 and 2.9.18.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

No SUSE Bugzilla entries cross referenced.

SUSE Security Advisories:

openSUSE-SU-2025:14663-1, published Sat Jan 18 18:49:59 2025

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Package Hub 15 SP6	`system-user-velociraptor >= 1.0.0-bp156.3.3.1` `velociraptor >= 0.7.0.4.git142.862ef23-bp156.3.3.1` `velociraptor-client >= 0.7.0.4.git142.862ef23-bp156.3.3.1`	Patchnames: openSUSE-2025-31
openSUSE Leap 15.6	`system-user-velociraptor >= 1.0.0-bp156.3.3.1` `velociraptor >= 0.7.0.4.git142.862ef23-bp156.3.3.1` `velociraptor-client >= 0.7.0.4.git142.862ef23-bp156.3.3.1`	Patchnames: openSUSE-2025-31
openSUSE Tumbleweed	`velociraptor >= 0.7.0.4.git142.862ef23-1.1`	Patchnames: openSUSE-Tumbleweed-2025-14663

SUSE Timeline for this CVE

CVE page created: Thu Apr 4 20:00:11 2024
CVE page last modified: Fri Jan 24 12:01:54 2025