Lucene search
GoogleOSV:CVE-2021-31407HistoryApr 23, 2021 - 4:15 p.m.
CVE-2021-31407
2021-04-2316:15:08
Google
osv.dev
7
Vulnerability in OSGi integration in com.vaadin:flow-server versions 1.2.0 through 2.4.7 (Vaadin 12.0.0 through 14.4.9), and 6.0.0 through 6.0.1 (Vaadin 19.0.0) allows attacker to access application classes and resources on the server via crafted HTTP request.
| CPE | Name | Operator | Version |
|---|---|---|---|
| flow | eq | 24.1.0-rc1 | |
| flow | eq | 13.0.0-alpha1 | |
| flow | eq | 23.2.0-beta2 | |
| flow | eq | 22.0.0-alpha7 | |
| flow | eq | 13.0.11 | |
| flow | eq | 24.1.0-beta1 | |
| flow | eq | 23.0.0-beta3 | |
| flow | eq | 14.10.4 | |
| flow | eq | 15.0.0-alpha11 | |
| flow | eq | 14.3.8 |
Related
vaadin
vaadin
osv
osv
github
github
cve
cve
CVE-2021-31407
2021-04-23 16:15:08
nvd
nvd
CVE-2021-31407
2021-04-23 16:15:08
prion
prion
Design/Logic Flaw
2021-04-23 16:15:00
veracode
veracode
Information Disclosure
2021-04-20 08:08:03
cvelist
cvelist