Denial of service in DataCommunicator class in Vaadin 8

Mô tả

Tham khảo

• vaadin/framework security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2021-33609 · ADVISORY
• vaadin/framework#12415 · WEB
• vaadin/framework · PACKAGE
• vaadin.com/security/cve-2021-33609 · WEB

Lỗ hổng khác của com.vaadin:vaadin-server

• CVE-2025-15022TRUNG BÌNH 4.8Action captions in Vaadin accept HTML by default but were not sanitized, potentially allowing Cross-site Scripting (XSS) if caption content …
• CVE-2025-9467TRUNG BÌNH 5.3When the Vaadin Upload's start listener is used to validate metadata about an incoming upload, it is possible to bypass the upload validatio…
• GHSA-j23j-q57m-63v3TRUNG BÌNH 4.3Denial of service in DataCommunicator class in Vaadin 8
• CVE-2021-31403THẤP 2.5Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:vaadin-server versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 …
• CVE-2020-36320CAO 7.5Unsafe validation RegEx in EmailValidator class in com.vaadin:vaadin-server versions 7.0.0 through 7.7.21 (Vaadin 7.0.0 through 7.7.21) allo…