← CVE Intelligence

CVE-2021-31410

Project sources exposure in Vaadin Designer PUBLISHED

Description (CNA)

Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote attackers to access project sources via crafted HTTP request.

Affected (CNA)

Vendor / productVersions
Vaadin / Designeraffected 4.3.0 before *

CWE

CWE-402

References

ADP enrichment

CVE

No English description supplied.