CVE-2025-31125
CISA 기관 조치 기한: 2026-02-12
Vite Vitejs
Qualys 위협 인텔 · 심각도 4/5 · QID 6766668 · ChainGuard
공개 익스플로잇
측면이동
CISA KEV
Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected.
KEV 필수 조치: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.