Stored cross-site scripting in Grid component in Vaadin 7 and 8

Mô tả

Tham khảo

• vaadin/framework security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2019-25028 · ADVISORY
• vaadin/framework#11644 · WEB
• vaadin/framework#11645 · WEB
• vaadin.com/security/cve-2019-25028 · WEB

Lỗ hổng khác của com.vaadin:vaadin-bom

• CVE-2021-33611TRUNG BÌNH 6.1Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 (Vaadin 14.0.0 th…
• GHSA-jfmf-w293-8xr8CAO 7.5Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
• GHSA-hw7r-qrhp-5pffTRUNG BÌNH 4.3Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20
• CVE-2021-33604THẤP 2.5URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 …
• CVE-2021-31412TRUNG BÌNH 5.3Improper sanitization of path in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.14 (Vaadin 10.0.0 thro…