CVE-2021-31410CWE-402

Project sources exposure in Vaadin Designer

High · published April 23, 2021

CVSS v3.1
8.6
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote attackers to access project sources via crafted HTTP request.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01690 · 76.9th percentile
Weakness
CWE-402 · Transmission of Private Resources into a New Sphere ('Resource Leak')
Published
2021-04-23T16:08Z
EPSS history
Timeline
  • 23 APR 16:08Z
    Project sources exposure in Vaadin Designer
    cvelistv5