| Package | Affected versions | Patched versions |
|---|---|---|
| com.vaadin:flow-server | ≥ 1.0.0, < 1.0.21≥ 1.1.0, < 2.9.3≥ 23.0.0, < 23.3.13≥ 24.0.0, < 24.0.9≥ 24.1.alpha1, < 24.1.0≥ 3.0.0, < 9.1.2 | 1.0.212.9.323.3.1324.0.924.1.09.1.2 |
| com.vaadin:vaadin | ≥ 10.0.0, < 10.0.24≥ 11.0.0, < 14.10.2≥ 15.0.0, < 22.1.0≥ 23.0.0, < 23.3.14≥ 24.0.0, < 24.0.7≥ 24.1.0.alpha1, < 24.1.0 | 10.0.2414.10.222.1.023.3.1424.0.724.1.0 |
| vaadin | = 24.1.0≥ 10.0.0, < 10.0.23≥ 11.0.0, < 14.10.2≥ 15.0.0, ≤ 22.0.28≥ 23.0.0, < 23.3.14≥ 24.0.0, < 24.0.7 | 10.0.2314.10.223.3.1424.0.7 |
Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0.rc2, resulting in potential information disclosure of class and method names in RPC responses by sending modified requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free