EUVD-2021-18312

Malware in sbrugna...

Vaadin Designer Information Disclosure Vulnerability

Vaadin Designer is a visualization tool that enables you to drag and drop and configure web components on a canvas. A security vulnerability exists in Vaadin Designer versions 4.3.0 - 4.6.3. The vulnerability stems from an overly lax configuration of the front-end resource server. A remote attack...

CVE-2021-31410

Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote attackers to access project sources via crafted HTTP request...

CVE-2021-31410

Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote attackers to access project sources via crafted HTTP request...

Cross site request forgery (csrf)

Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote attackers to access project sources via crafted HTTP request...

CVE-2021-31410

CVE-2021-31410 affects Vaadin Designer 4.3.0–4.6.3, where an overly relaxed configuration of the frontend resources server allows remote attackers to access project sources via a crafted HTTP request. The CVSS metrics indicate high impact on confidentiality (C:H) with network access and low attac...

CVE-2021-31410 Project sources exposure in Vaadin Designer

Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote attackers to access project sources via crafted HTTP request...

Vaadin Designer 安全漏洞

Vaadin Designer is a visualization tool that enables you to drag and drop and configure web components on a canvas. A security vulnerability exists in Vaadin Designer versions 4.3.0 - 4.6.3. The vulnerability stems from an overly lax configuration of the front-end resource server. A remote attack...

Project sources exposure in Vaadin Designer

Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote attackers to access project sources via crafted HTTP request. See CWE-402: Transmission of Private Resources into a New Sphere 'Resource Leak' Affected products and mitigation...