Lucene search
PRIOn knowledge basePRION:CVE-2023-25499HistoryJun 22, 2023 - 1:15 p.m.
Information disclosure
2023-06-2213:15:00
PRIOn knowledge base
www.prio-n.com
5
information disclosure
non-visible components
ui
server side
vaadin 10
vaadin 11
vaadin 14
vaadin 15
vaadin 22
vaadin 23
vaadin 24
When adding non-visible components to the UI in server side, content is sent to the browser in Vaadin 10.0.0 through 10.0.22, 11.0.0 through 14.10.0, 15.0.0 through 22.0.28, 23.0.0 through 23.3.12, 24.0.0 through 24.0.5 and 24.1.0.alpha1 to 24.1.0.beta1, resulting in potential information disclosure.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vaadin | eq | 24.1.0 alpha2 | |
| vaadin | eq | 24.1.0 alpha3 | |
| vaadin | eq | 24.1.0 alpha4 | |
| vaadin | eq | 24.1.0 alpha5 | |
| vaadin | eq | 24.1.0 alpha6 | |
| vaadin | eq | 24.1.0 beta1 | |
| vaadin | ge | 24.0.0 | |
| vaadin | lt | 24.0.6 | |
| vaadin | ge | 23.0.0 | |
| vaadin | lt | 23.3.13 |
Related
osv
osv
CVE-2023-25499
2023-06-22 13:15:09
veracode
veracode
Information Exposure
2023-06-29 12:56:28
nvd
nvd
CVE-2023-25499
2023-06-22 13:15:09
cve
cve
CVE-2023-25499
2023-06-22 13:15:09
vaadin
vaadin
Possible information disclosure in non visible components
2023-06-22 00:00:00
cvelist
cvelist
CVE-2023-25499 Possible information disclosure in non visible components
2023-06-22 12:47:57
github
github