Reflected cross-site scripting in development mode handler in Vaadin

Description

References

• vaadin/flow security advisory · WEB
• vaadin.com/security/cve-2021-33604 · WEB

Más vulnerabilidades de com.vaadin:flow-server

• CVE-2026-2742MEDIO 5.3An authentication bypass vulnerability exists in Vaadin 14.0.0 through 14.14.0, 23.0.0 through 23.6.6, 24.0.0 through 24.9.7 and 25.0.0 thro…
• CVE-2023-25500MEDIO 4.3Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1…
• CVE-2023-25499MEDIO 6.5When adding non-visible components to the UI in server side, content is sent to the browser in Vaadin 10.0.0 through 10.0.22, 11.0.0 through…
• GHSA-fr26-qjc8-mvjxMEDIO 5.3Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
• GHSA-c57f-4vp2-jqhmMEDIO 6.3Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19