Lucene search
GoogleOSV:GHSA-JMX8-355M-8VWHHistoryApr 19, 2021 - 2:53 p.m.
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
2021-04-1914:53:09
Google
osv.dev
14
vaadin 10
vaadin 11
uidl request
cve-2018-25007
security issue
EPSS
0.001
Percentile
22.7%
Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message.
Related
cve
cve
CVE-2018-25007
2021-04-23 16:15:07
osv
osv
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
2021-04-19 14:49:13
CVE-2018-25007
2021-04-23 16:15:07
vaadin
vaadin
veracode
veracode
Remote Code Execution (RCE)
2021-04-21 02:56:19
github
github
prion
prion
Design/Logic Flaw
2021-04-23 16:15:00
cvelist
cvelist
nvd
nvd
CVE-2018-25007
2021-04-23 16:15:07