Vaadin Flow

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

11CVEs

Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19

Published 2021-04-23 · Modified

8.6EPSS 0.024

Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19

Published 2021-05-05 · Modified

7.8EPSS 0.002

Directory traversal in development mode handler in Vaadin 14 and 15-17

Published 2021-04-23 · Modified

7.5EPSS 0.012

Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17

Published 2021-04-23 · Modified

7.5EPSS 0.011

Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19

Published 2021-04-23 · Modified

7.1EPSS 0.003

Potential sensitive data exposure in applications using Vaadin 15

Published 2021-04-23 · Modified

6.5EPSS 0.010

Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13

Published 2021-04-23 · Modified

6.1EPSS 0.007

Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19

Published 2021-06-24 · Modified

5.3EPSS 0.013

Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11

Published 2021-04-23 · Modified

4.3EPSS 0.006

Timing side channel vulnerability in endpoint request handler in Vaadin 15-19

Published 2021-04-23 · Modified

4.0EPSS 0.002

Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18

Published 2021-04-23 · Modified

4.0EPSS 0.002