CVE-2021-31410

7.5 highEPSS 1.7%

High (7.5) in vaadin designer. EPSS 1.7% chance of exploitation in the next 30 days.

Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote attackers to access project sources via crafted HTTP request.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWEs: CWE-668, CWE-402
Published: 2021-04-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vaadin:designer

References

https://vaadin.com/security/cve-2021-31410
https://vaadin.com/security/cve-2021-31410

Check your stack JSON