high8.6
CVE-2021-31410
Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote attackers to access project sources via…
Impact
Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote attackers to access project sources via crafted HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vaadin | Designer | from 4.3.0 before 4.6.4 |