« Volver al listado

CVE-2021-31408

Estado: ModificadaAlta (7.1)—

Authentication.logout() helper in com.vaadin:flow-client versions 5.0.0 prior to 6.0.0 (Vaadin 18), and 6.0.0 through 6.0.4 (Vaadin 19.0.0 through 19.0.3) uses incorrect HTTP method, which, in combination with Spring Security CSRF protection, allows local attackers to access Fusion endpoints after the user attempted to log out.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Vaadin — FlowVaadin — Vaadin

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-31408",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.3,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@vaadin.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.3,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 1
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.1,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@vaadin.com",
      "affectedData": [
        {
          "vendor": "Vaadin",
          "product": "Vaadin",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "19.0.0",
                  "status": "unaffected"
                },
                {
                  "at": "19.0.0",
                  "status": "affected"
                }
              ],
              "version": "18.0.0",
              "lessThan": "*",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "Vaadin",
          "product": "flow-client",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "6.0.0",
                  "status": "unaffected"
                },
                {
                  "at": "6.0.0",
                  "status": "affected"
                }
              ],
              "version": "5.0.0",
              "lessThan": "*",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-04-23T17:15:08.260",
  "references": [
    {
      "url": "https://github.com/vaadin/flow/pull/10577",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "security@vaadin.com"
    },
    {
      "url": "https://vaadin.com/security/cve-2021-31408",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@vaadin.com"
    },
    {
      "url": "https://github.com/vaadin/flow/pull/10577",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://vaadin.com/security/cve-2021-31408",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@vaadin.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-613"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-613"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Authentication.logout() helper in com.vaadin:flow-client versions 5.0.0 prior to 6.0.0 (Vaadin 18), and 6.0.0 through 6.0.4 (Vaadin 19.0.0 through 19.0.3) uses incorrect HTTP method, which, in combination with Spring Security CSRF protection, allows local attackers to access Fusion endpoints after the user attempted to log out."
    },
    {
      "lang": "es",
      "value": "El asistente Authentication.logout() en com.vaadin:flow-client versiones  5.0.0 anteriores a 6.0.0 (Vaadin 18) y versiones 6.0.0 hasta 6.0.4 (versiones Vaadin 19.0.0 hasta 19.0.3) usan un método HTTP incorrecto , que, en combinación con la protección CSRF de Spring Security, permite a atacantes locales acceder a endpoints de Fusion después de que el usuario intenta cerrar la sesión"
    }
  ],
  "lastModified": "2026-06-17T03:51:43.580",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "138C0A40-EC8F-4F6F-B907-1F5282B83958",
              "versionEndExcluding": "6.0.0",
              "versionStartIncluding": "5.0.0"
            },
            {
              "criteria": "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9CCDECF-655E-48E5-ADEC-F5189C6E043D",
              "versionEndExcluding": "6.0.5",
              "versionStartIncluding": "6.0.0"
            },
            {
              "criteria": "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74A5FA0C-C1AE-496E-8601-A9CC193F750E",
              "versionEndExcluding": "19.0.4",
              "versionStartIncluding": "19.0.0"
            },
            {
              "criteria": "cpe:2.3:a:vaadin:vaadin:18.0.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0C90C81-A26F-4686-BC0C-6D86C3620F5C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@vaadin.com"
}