Lucene search
Veracode Vulnerability DatabaseVERACODE:31060HistoryJun 25, 2021 - 4:45 a.m.
Information Disclosure
2021-06-2504:45:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
44.3%
flow-server is vulnerable to information disclosure. Lack of validation and sanitization of path in the default RouteNotFoundError view allows an attacker to enumerate available routes via malicious HTTP requests.
| CPE | Name | Operator | Version |
|---|---|---|---|
| flow server | le | 6.0.9 | |
| flow server | le | 2.6.1 | |
| flow server | le | 6.0.9 | |
| flow server | le | 2.6.1 |
Related
cve
cve
CVE-2021-31412
2021-06-24 12:15:08
vaadin
vaadin
nvd
nvd
CVE-2021-31412
2021-06-24 12:15:08
cvelist
cvelist
osv
osv
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
2021-06-28 16:55:58
CVE-2021-31412
2021-06-24 12:15:08
github
github
prion
prion
Design/Logic Flaw
2021-06-24 12:15:00