CVE-2024-23331

CVE-2024-23331 is a bypass vulnerability in the Vite frontend framework's development server, primarily affecting Windows systems due to their case-insensitive file systems. Attackers can bypass the server.fs.deny blacklist by requesting sensitive files with case-augmented filenames, leading to unauthorized information disclosure. This vulnerability has a CVSS score of 7.5 (High), indicating a network-exploitable flaw with low attack complexity and no user interaction required, resulting in high confidentiality impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.