CVE-2021-31410

2021-04-2317:15:08

Google

osv.dev

7 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.2%

JSON

Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote attackers to access project sources via crafted HTTP request.

CPENameOperatorVersion
designereq4.3.1
designereq4.5.9
designereq4.4.2
designereq4.4.0
designereq4.3.12
designereq4.5.10
designereq4.5.2
designereq4.5.5
designereq4.3.11
designereq4.6.3

Name	Operator	Version
designer	eq	4.3.1
designer	eq	4.5.9
designer	eq	4.4.2
designer	eq	4.4.0
designer	eq	4.3.12
designer	eq	4.5.10
designer	eq	4.5.2
designer	eq	4.5.5
designer	eq	4.3.11
designer	eq	4.6.3

Rows per page:

1-10 of 331

References

vaadin.com/security/cve-2021-31410