Lucene search
GoogleOSV:GHSA-J9WR-49VQ-RM5GHistoryApr 19, 2021 - 2:46 p.m.
Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19
2021-04-1914:46:49
Google
osv.dev
12
0.003 Low
EPSS
Percentile
65.1%
Vulnerability in OSGi integration in com.vaadin:flow-server versions 1.2.0 through 2.4.7 (Vaadin 12.0.0 through 14.4.9), and 6.0.0 through 6.0.1 (Vaadin 19.0.0) allows attacker to access application classes and resources on the server via crafted HTTP request.
Related
vaadin
vaadin
osv
osv
OSGi applications using Vaadin 12-14 and 19 vulnerable to server classes and resources exposure
2021-04-19 14:50:49
CVE-2021-31407
2021-04-23 16:15:08
github
github
cve
cve
CVE-2021-31407
2021-04-23 16:15:08
nvd
nvd
CVE-2021-31407
2021-04-23 16:15:08
prion
prion
Design/Logic Flaw
2021-04-23 16:15:00
veracode
veracode
Information Disclosure
2021-04-20 08:08:03
cvelist
cvelist