Lucene search

VaadinCVE-2020-36321

HistoryApr 23, 2021 - 4:15 p.m.

CVE-2020-36321

2021-04-2316:15:08

CWE-22

Vaadin

web.nvd.nist.gov

cve-2020-36321

url validation

com.vaadin

flow-server

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.004

Percentile

72.6%

JSON

Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 (Vaadin 14.0.0 through 14.4.2), and 3.0 prior to 5.0 (Vaadin 15 prior to 18) allows attacker to request arbitrary files stored outside of intended frontend resources folder.

Affected configurations

Nvd

Node

vaadinflowRange2.0.0–2.4.2

vaadinflowRange3.0.0–5.0.0

vaadinvaadinRange14.0.0–14.4.3

vaadinvaadinRange15.0.0–18.0.0

VendorProductVersionCPE
vaadinflow*cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*
vaadinvaadin*cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vaadin	flow	*	cpe:2.3:a:vaadin:flow::::::::
vaadin	vaadin	*	cpe:2.3:a:vaadin:vaadin::::::::

CNA Affected

[
  {
    "product": "Vaadin",
    "vendor": "Vaadin",
    "versions": [
      {
        "changes": [
          {
            "at": "15.0.0",
            "status": "affected"
          },
          {
            "at": "18.0.0",
            "status": "unaffected"
          }
        ],
        "lessThan": "*",
        "status": "affected",
        "version": "14.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "flow-server",
    "vendor": "Vaadin",
    "versions": [
      {
        "changes": [
          {
            "at": "3.0.0",
            "status": "affected"
          },
          {
            "at": "5.0.0",
            "status": "unaffected"
          }
        ],
        "lessThan": "*",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/vaadin/flow/pull/9392

vaadin.com/security/cve-2020-36321

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.004

Percentile

72.6%

JSON

Related for CVE-2020-36321