Description
Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote attackers to access project sources via crafted HTTP request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Vaadin | Designer | 4.3.0 | — |