GHSA-QCC4-3RXF-GF4M Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20

🗓️ 30 Aug 2021 16:16:38Reported by GoogleType

osv🔗 osv.dev👁 17 Views

Unauthorized update of a disabled checkbox inside an enabled CheckboxGroup across Vaadin versions 12 to 20.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2021-33605	25 Aug 202116:25	–	circl
CNNVD	vaadin 代码问题漏洞	25 Aug 202100:00	–	cnnvd
CVE	CVE-2021-33605	25 Aug 202112:12	–	cve
Cvelist	CVE-2021-33605 Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20	25 Aug 202112:12	–	cvelist
EUVD	EUVD-2021-1840	7 Oct 202500:30	–	euvd
Github Security Blog	Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20	30 Aug 202116:16	–	github
Github Security Blog	Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20	30 Aug 202116:16	–	github
NVD	CVE-2021-33605	25 Aug 202113:15	–	nvd
OSV	CVE-2021-33605	25 Aug 202113:15	–	osv
Prion	Input validation	25 Aug 202113:15	–	prion

Source	Link
github	www.github.com/vaadin/flow-components/security/advisories/GHSA-qcc4-3rxf-gf4m
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-33605
github	www.github.com/vaadin/flow-components/pull/1903
github	www.github.com/vaadin/flow-components/commit/1aa6bc94c763023bc3fc5849c2a1e8cab3bf6766
github	www.github.com/vaadin/flow-components/commit/f136532a735f703f1144f19fee48c9009c659f03
github	www.github.com/vaadin/flow-components
vaadin	www.vaadin.com/security/cve-2021-33605

08 Nov 2023 04:06Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.14.3

EPSS0.00594