Lucene search

[email protected]CVE-2021-31412

HistoryJun 24, 2021 - 12:15 p.m.

CVE-2021-31412

2021-06-2412:15:08

CWE-1295

CWE-20

[email protected]

web.nvd.nist.gov

cve-2021-31412

vulnerability

security

com.vaadin

flow-server

path sanitization

route enumeration

crafted http request

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.5%

JSON

Improper sanitization of path in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.14 (Vaadin 10.0.0 through 10.0.18), 1.1.0 prior to 2.0.0 (Vaadin 11 prior to 14), 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), and 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows network attacker to enumerate all available routes via crafted HTTP request when application is running in production mode and no custom handler for NotFoundException is provided.

Affected configurations

NVD

Node

vaadinflowRange1.0.0–1.0.14

vaadinflowRange1.1.0–1.4.0

vaadinflowRange2.0.0–2.6.1

vaadinflowRange3.0.0–5.0.0

vaadinflowRange6.0.0–6.0.9

vaadinvaadinRange10.0.0–10.0.18

vaadinvaadinRange11.0.0–13.0.0

vaadinvaadinRange14.0.0–14.6.1

vaadinvaadinRange15.0.0–18.0.0

vaadinvaadinRange19.0.0–19.0.8

CPENameOperatorVersion
vaadin:flowvaadin flowle1.0.14
vaadin:flowvaadin flowle1.4.0
vaadin:flowvaadin flowle2.6.1
vaadin:flowvaadin flowle5.0.0
vaadin:flowvaadin flowle6.0.9
vaadin:vaadinvaadinle10.0.18
vaadin:vaadinvaadinle13.0.0
vaadin:vaadinvaadinle14.6.1
vaadin:vaadinvaadinle18.0.0
vaadin:vaadinvaadinle19.0.8

CPE	Name	Operator	Version
vaadin:flow	vaadin flow	le	1.0.14
vaadin:flow	vaadin flow	le	1.4.0
vaadin:flow	vaadin flow	le	2.6.1
vaadin:flow	vaadin flow	le	5.0.0
vaadin:flow	vaadin flow	le	6.0.9
vaadin:vaadin	vaadin	le	10.0.18
vaadin:vaadin	vaadin	le	13.0.0
vaadin:vaadin	vaadin	le	14.6.1
vaadin:vaadin	vaadin	le	18.0.0
vaadin:vaadin	vaadin	le	19.0.8

CNA Affected

[
  {
    "product": "Vaadin",
    "vendor": "Vaadin",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "10.0.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "10.0.18",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "11.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "14.0.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "14.0.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "14.6.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "15.0.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "19.0.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "flow-server",
    "vendor": "Vaadin",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "1.0.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "1.0.14",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "1.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.0.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.6.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "6.0.9",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/vaadin/flow/pull/11107

vaadin.com/security/cve-2021-31412

Social References

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.5%

JSON

Related for CVE-2021-31412

vaadin1 nvd1 osv3 github1 veracode1 cvelist1 prion1