com.vaadin:flow-server vulnerabilities (Maven)
13 vulnerabilities.
-
com.vaadin:flow-serverMaven Unauthorized session creation via reserved framework path access 5.3 Medium -
com.vaadin:flow-serverMaven Vaadin vulnerable to possible information disclosure of class and method names in RPC response 3.5 Low -
com.vaadin:flow-serverMaven Possible information disclosure in non visible components 5.7 Medium -
com.vaadin:flow-serverMaven Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19 5.3 Medium -
com.vaadin:flow-serverMaven Reflected cross-site scripting in development mode handler in Vaadin 2.5 Low -
com.vaadin:flow-serverMaven Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19 6.3 Medium -
com.vaadin:flow-serverMaven Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11 2.6 Low -
com.vaadin:flow-serverMaven Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13 6.1 Medium -
com.vaadin:flow-serverMaven Potential sensitive data exposure in applications using Vaadin 15 3.1 Low -
com.vaadin:flow-serverMaven Directory traversal in development mode handler in Vaadin 14 and 15-17 5.9 Medium -
com.vaadin:flow-serverMaven Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18 4.0 Medium -
com.vaadin:flow-serverMaven Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19 8.6 High -
com.vaadin:flow-serverMaven Timing side channel vulnerability in endpoint request handler in Vaadin 15-19 4.0 Medium