Lucene search
GoogleOSV:GHSA-25XC-JWFQ-39JWHistoryApr 19, 2021 - 2:50 p.m.
OSGi applications using Vaadin 12-14 and 19 vulnerable to server classes and resources exposure
2021-04-1914:50:49
Google
osv.dev
7
0.003 Low
EPSS
Percentile
65.1%
Vulnerability in OSGi integration in com.vaadin:flow-server versions 1.2.0 through 2.4.7 (Vaadin 12.0.0 through 14.4.9), and 6.0.0 through 6.0.1 (Vaadin 19.0.0) allows attacker to access application classes and resources on the server via crafted HTTP request.
Related
vaadin
vaadin
github
github
cve
cve
CVE-2021-31407
2021-04-23 16:15:08
osv
osv
Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19
2021-04-19 14:46:49
CVE-2021-31407
2021-04-23 16:15:08
nvd
nvd
CVE-2021-31407
2021-04-23 16:15:08
prion
prion
Design/Logic Flaw
2021-04-23 16:15:00
veracode
veracode
Information Disclosure
2021-04-20 08:08:03
cvelist
cvelist