Lucene search
GoogleOSV:GHSA-3H5R-928V-MXHHHistoryApr 19, 2021 - 2:49 p.m.
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
2021-04-1914:49:13
Google
osv.dev
12
uidl request handler
vaadin 10
vaadin 11
missing check
flow-server
synchronization message
security vulnerability
EPSS
0.001
Percentile
22.7%
Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message.
Related
cve
cve
CVE-2018-25007
2021-04-23 16:15:07
vaadin
vaadin
veracode
veracode
Remote Code Execution (RCE)
2021-04-21 02:56:19
github
github
prion
prion
Design/Logic Flaw
2021-04-23 16:15:00
osv
osv
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
2021-04-19 14:53:09
CVE-2018-25007
2021-04-23 16:15:07
nvd
nvd
CVE-2018-25007
2021-04-23 16:15:07
cvelist
cvelist