Information disclosure in Vite - CVE-2025-30208
Published: March 31, 2025 / Updated: September 12, 2025
Vulnerability identifier: #VU106265
CSH Severity: Medium
CVSS v4: 5.9 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-30208
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to the contents of arbitrary files can be returned to the browser. A remote attacker can gain unauthorized access to sensitive information on the system.
Affected software
Vite
Guardium Data Security Center (GDSC)
Guardium Data Security Center (GDSC)
How to mitigate CVE-2025-30208
Install updates from vendor's website.
Vite - addressed in versions 4.5.10, 5.4.15, 6.0.12, 6.1.2, 6.2.3
Guardium Data Security Center (GDSC) - update to 3.8.1
Guardium Data Security Center (GDSC) - update to 3.8.1
Links to Public Exploits and PoC-codes
- Exploit #11949 - CVE-2025-30208-EXP (?️ Detect and exploit the Vite development server's arbitrary file read vulnerability (CVE-2025-30208) with customizable options for effective scanning.) (September 12, 2025)
- Exploit #11764 - CVE-2025-30208 (July 3, 2025)
- Exploit #11477 - CVE-2025-30208 (June 6, 2025)
- Exploit #11295 - Vite-CVE-2025-30208-EXP (April 11, 2025)
- Exploit #11290 - CVE-2025-30208-PoC (April 4, 2025)
- Exploit #11281 - CVE-2025-30208-and-CVE-2025-31125 (April 4, 2025)
- Exploit #11279 - CVE-2025-30208 (April 4, 2025)
- Exploit #11278 - CVE-2025-30208 (April 4, 2025)
- Exploit #11266 - CVE-2025-30208-EXP (CVE-2025-30208-EXP) (March 31, 2025)
- Exploit #11265 - CVE-2025-30208 (March 31, 2025)
- Exploit #11260 - CVE-2025-30208-PoC (March 31, 2025)
- Exploit #11259 - CVE-2025-30208-EXP (March 31, 2025)
- Exploit #11258 - Vite-CVE-2025-30208-Scanner (March 31, 2025)
- Exploit #11255 - CVE-2025-30208 (March 31, 2025)
External References
- https://github.com/vitejs/vite/commit/315695e9d97cc6cfa7e6d9e0229fb50cdae3d9f4
- https://github.com/vitejs/vite/commit/80381c38d6f068b12e6e928cd3c616bd1d64803c
- https://github.com/vitejs/vite/commit/807d7f06d33ab49c48a2a3501da3eea1906c0d41
- https://github.com/vitejs/vite/commit/92ca12dc79118bf66f2b32ff81ed09e0d0bd07ca
- https://github.com/vitejs/vite/commit/f234b5744d8b74c95535a7b82cc88ed2144263c1
- https://github.com/vitejs/vite/security/advisories/GHSA-x574-m823-4x7w