From e50116ed074248f2a3f192fa3e1aff564fce110b Mon Sep 17 00:00:00 2001
From: Artem Godin <fluorumlabs@users.noreply.github.com>
Date: Fri, 30 Apr 2021 12:19:12 +0300
Subject: [PATCH] Add CVE-2021-31409

---
 2021/31xxx/CVE-2021-31409.json | 141 ++++++++++++++++++++++++++++++---
 1 file changed, 130 insertions(+), 11 deletions(-)

diff --git a/2021/31xxx/CVE-2021-31409.json b/2021/31xxx/CVE-2021-31409.json
index 243d838f0e6..f00790a4b94 100644
--- a/2021/31xxx/CVE-2021-31409.json
+++ b/2021/31xxx/CVE-2021-31409.json
@@ -2,17 +2,136 @@
     "data_type": "CVE",
     "data_format": "MITRE",
     "data_version": "4.0",
+    "generator": {
+      "engine": "Vulnogram 0.0.9"
+    },
     "CVE_data_meta": {
-        "ID": "CVE-2021-31409",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+      "ID": "CVE-2021-31409",
+      "ASSIGNER": "security@vaadin.com",
+      "DATE_PUBLIC": "2021-04-30T08:17:00.000Z",
+      "TITLE": "Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19",
+      "AKA": "",
+      "STATE": "PUBLIC"
+    },
+    "source": {
+      "defect": [],
+      "advisory": "",
+      "discovery": "EXTERNAL"
+    },
+    "affects": {
+      "vendor": {
+        "vendor_data": [
+          {
+            "vendor_name": "Vaadin",
+            "product": {
+              "product_data": [
+                {
+                  "product_name": "Vaadin",
+                  "version": {
+                    "version_data": [
+                      {
+                        "version_name": "",
+                        "version_affected": ">=",
+                        "version_value": "8.0.0",
+                        "platform": ""
+                      },
+                      {
+                        "version_name": "",
+                        "version_affected": "<=",
+                        "version_value": "8.12.4",
+                        "platform": ""
+                      }
+                    ]
+                  }
+                },
+                {
+                  "product_name": "vaadin-compatibility-server",
+                  "version": {
+                    "version_data": [
+                      {
+                        "version_name": "",
+                        "version_affected": ">=",
+                        "version_value": "8.0.0",
+                        "platform": ""
+                      },
+                      {
+                        "version_name": "",
+                        "version_affected": "<=",
+                        "version_value": "8.12.4",
+                        "platform": ""
+                      }
+                    ]
+                  }
+                }
+              ]
+            }
+          }
+        ]
+      }
+    },
+    "problemtype": {
+      "problemtype_data": [
+        {
+          "description": [
+            {
+              "lang": "eng",
+              "value": "CWE-400 Uncontrolled Resource Consumption"
+            }
+          ]
+        }
+      ]
     },
     "description": {
-        "description_data": [
-            {
-                "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
-            }
-        ]
-    }
-}
\ No newline at end of file
+      "description_data": [
+        {
+          "lang": "eng",
+          "value": "Unsafe validation RegEx in EmailValidator component in com.vaadin:vaadin-compatibility-server versions 8.0.0 through 8.12.4 (Vaadin versions 8.0.0 through 8.12.4) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses."
+        }
+      ]
+    },
+    "references": {
+      "reference_data": [
+        {
+          "refsource": "CONFIRM",
+          "url": "https://vaadin.com/security/cve-2021-31409",
+          "name": "https://vaadin.com/security/cve-2021-31409"
+        },
+        {
+          "refsource": "CONFIRM",
+          "url": "https://github.com/vaadin/framework/issues/12240",
+          "name": "https://github.com/vaadin/framework/issues/12240"
+        },
+        {
+          "refsource": "CONFIRM",
+          "url": "https://github.com/vaadin/framework/pull/12241",
+          "name": "https://github.com/vaadin/framework/pull/12241"
+        }
+      ]
+    },
+    "configuration": [],
+    "impact": {
+      "cvss": {
+        "version": "3.1",
+        "attackVector": "NETWORK",
+        "attackComplexity": "LOW",
+        "privilegesRequired": "NONE",
+        "userInteraction": "NONE",
+        "scope": "UNCHANGED",
+        "confidentialityImpact": "NONE",
+        "integrityImpact": "NONE",
+        "availabilityImpact": "HIGH",
+        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+        "baseScore": 7.5,
+        "baseSeverity": "HIGH"
+      }
+    },
+    "exploit": [],
+    "work_around": [],
+    "solution": [],
+    "credit": [
+      {
+        "lang": "eng",
+        "value": "This issue was discovered and responsibly reported by Stefan Penndorf."
+      }
+    ]
+  }
\ No newline at end of file