CVE-2021-31410: Transmission of Private Resources into a New Sphere

Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote attackers to access project sources via crafted HTTP request...

PT-2021-19292

Name of the Vulnerable Software and Affected Versions Vaadin Designer versions 4.3.0 through 4.6.3 Description The issue is related to an overly relaxed configuration of the frontend resources server, allowing remote attackers to access project sources via crafted HTTP requests. Recommendations F...