Upstream information

CVE-2024-31207 at MITRE

Description

Vite (French word for "quick", pronounced /vit/, like "veet") is a frontend build tooling to improve the frontend development experience.`server.fs.deny` does not deny requests for patterns with directories. This vulnerability has been patched in version(s) 5.2.6, 5.1.7, 5.0.13, 4.5.3, 3.2.10 and 2.9.18.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

No SUSE Bugzilla entries cross referenced.

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
openSUSE Tumbleweed
  • velociraptor >= 0.7.0.4.git142.862ef23-1.1
 Patchnames:
openSUSE-Tumbleweed-2025-14663

SUSE Timeline for this CVE

CVE page created: Thu Apr 4 20:00:11 2024
CVE page last modified: Sat Jan 18 19:52:16 2025