Lucene search
Veracode Vulnerability DatabaseVERACODE:30050HistoryApr 20, 2021 - 8:08 a.m.
Information Disclosure
2021-04-2008:08:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
0.003 Low
EPSS
Percentile
65.1%
vaadin-bom is vulnerable to information disclosure. The OSGi integration allows an attacker to access application classes and resources on the server via a malicious HTTP request.
| CPE | Name | Operator | Version |
|---|---|---|---|
| flow server | le | 2.4.7 | |
| flow server | le | 6.0.1 |
Related
vaadin
vaadin
osv
osv
OSGi applications using Vaadin 12-14 and 19 vulnerable to server classes and resources exposure
2021-04-19 14:50:49
Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19
2021-04-19 14:46:49
CVE-2021-31407
2021-04-23 16:15:08
github
github
cve
cve
CVE-2021-31407
2021-04-23 16:15:08
nvd
nvd
CVE-2021-31407
2021-04-23 16:15:08
prion
prion
Design/Logic Flaw
2021-04-23 16:15:00
cvelist
cvelist