Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. `@fs` denies access to files outside of Vite serving allow list. Adding `?raw??` or `?import&raw??` to the URL bypasses this limitation and returns the file content if it exists. This bypass exists because trailing separators such as `?` are removed in several places, but are not accounted for in query string regexes. The contents of arbitrary files can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network (using `--host` or `server.host` config option) are affected. Versions 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10 fix the issue.
PoC: CVE-2025-30208-EXP
CVE-2025-30208-EXP
PoC: CVE-2025-30208
The first pure Vite scanner on the entire network
PoC: CVE-2025-30208-LFI
This exploit is for educational and ethical security testing purposes only. The use of this exploit against targets without prior mutual consent is illegal, and the developer disclaims any liability for misuse or damage caused by this exploit.
PoC: Exploit-VITE-CVE-2025-30208-CVE-2025-31125
Python-based security assessment tool for detecting exposed Vite development servers, identifying sensitive file exposure, and validating filesystem access control weaknesses in authorized environments.
PoC: CVE-2025-30208
CVE‑2025‑30208 is a medium-severity arbitrary file read vulnerability in the Vite development server (a popular frontend build tool)
PoC: CVE-2025-30208-Series
Analysis of the Reproduction of CVE-2025-30208 Series Vulnerabilities
PoC: Vite-CVE-2025-30208-EXP
Vite-CVE-2025-30208-EXP单目标检测，支持自定义读取路径，深度检索
PoC: Vite-CVE-2025-30208-Scanner
CVE-2025-30208-EXP
PoC: CVE-2025-30208
最新的CVE-2025-30208的poc（这个仓库主要拿来写刷src的一些个人思路技巧，自己写的或者搜集挖src的bypass-waf的脚本）
PoC: CVE-2025-30208
CVE-2025-30208 exploit script
PoC: CVE-2025-30208-Arbitrary-File-Read-in-Vite-servers
This repository documents CVE-2025-30208, an Arbitrary File Read vulnerability affecting Vite development servers when misconfigured or exposed to untrusted networks.
PoC: CVE-2025-30208
CVE-2025-30208
PoC: CVE-2025-30208-EXP
🛠️ Detect and exploit the Vite development server's arbitrary file read vulnerability (CVE-2025-30208) with customizable options for effective scanning.
PoC: CVE-2025-30208
CVE-2025-30208
PoC: CVE-2025-30208
CVE‑2025‑30208 is a medium-severity arbitrary file read vulnerability in the Vite development server (a popular frontend build tool)
PoC: Blackash-CVE-2025-30208
CVE-2025-30208
PoC: CVE-2025-30208
POC
PoC: CVE-2025-30208-template
CVE-2025-30208 vite file read nuclei template
PoC: CVE-2025-30208-PoC
CVE-2025-30208 - Vite Arbitrary File Read PoC
PoC: CVE-2025-30208
mass scan for CVE-2025-30208
PoC: CVE-2025-30208
针对CVE-2025-30208的简单漏洞利用
PoC: CVE-2025-30208-EXP
CVE-2025-30208-EXP
PoC: CVE-2025-30208-ViteVulnScanner
CVE-2025-30208 ViteVulnScanner
PoC: CVE-2025-30208-Vite
CVE-2025-30208 | Vite脚本
PoC: CVE-2025-30208-PoC
CVE-2025-30208动态检测脚本，支持默认路径，自定义路径动态检测
PoC: CVE-2025-30208
CVE-2025-30208 检测工具。python script && nuclei template
PoC: CVE-2025-30208_POC
CVE-2025-30208 任意文件读取漏洞快速验证
PoC: CVE-2025-30208POCcn
CVE-2025-30208 POC
PoC: CVE-2025-30208
CVE-2025-30208漏洞扫描工具
PoC: CVE-2025-30208
CVE-2025-30208 检测工具
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free