CVE-2023-25500

creationtimestamp| type| source ---|---|--- 2024-01-28 00:20:14+00:00| seen| https://t.me/arpsyndicate/3128...

com.alibaba.rsocket:alibaba-broker-server (>=1.1.3, <=1.1.4), com.github.mcollovati.vertx:vaadin-flow-sockjs (>=23.1.0, <=23.1.1) +259 more potentially affected by CVE-2023-25500 via com.vaadin:flow-server (>=23.0.0, <=23.3.12)

com.vaadin:flow-server MAVEN version =23.0.0, =1.1.3, =23.1.0, =23.1.0, =1.0.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =5.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.3.12 and more Source cves: CVE-2023-25500 Source advisory: OSV:GHSA-CH48-9R3Q-PV7X...

com.faendir.vaadin:jfreechart-flow (1.1.6), com.github.mcollovati.vertx:vaadin-flow-sockjs (0.2.0) +93 more potentially affected by CVE-2023-25500 via com.vaadin:flow-server (>=1.0.0, <=1.0.20)

com.vaadin:flow-server MAVEN version =1.0.0, =0.2.0, =0.5.0, =1.0.0, =1.0.0.alpha1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.20 and more Source cves: CVE-2023-25500 Source advisory: OSV:GHSA-CH48-9R3Q-PV7X...

com.vaadin:vaadin-jandex (>=24.0.0, <=24.0.6), com.vaadin:vaadin-platform-javadoc (>=24.0.0, <=24.0.6) potentially affected by CVE-2023-25500 via com.vaadin:vaadin (>=24.0.0, <=24.0.6)

com.vaadin:vaadin MAVEN version =24.0.0, =24.0.0, =24.0.0, =24.0.6 Source cves: CVE-2023-25500 Source advisory: GHSA-CH48-9R3Q-PV7X...

com.alibaba.rsocket:alibaba-broker-server (>=1.0.1, <=1.1.2), com.beirtipol:jfixtools-reporting (1.0-beta) +129 more potentially affected by CVE-2023-25500 via com.vaadin:flow-server (>=3.0.0, <=9.1.1)

com.vaadin:flow-server MAVEN version =3.0.0, =1.0.1, =1.1.6, =15.0.0, =15.0.0, =3.2.3, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =9.1.1 and more Source cves: CVE-2023-25500 Source advisory: GHSA-CH48-9R3Q-PV7X...

com.alibaba.rsocket:alibaba-broker-server (1.1.5), com.flowingcode.addons:font-awesome-iron-iconset (5.2.2) +119 more potentially affected by CVE-2023-25500 via com.vaadin:flow-server (>=24.0.0, <=24.0.8)

com.vaadin:flow-server MAVEN version =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.8 and more Source cves: CVE-2023-25500 Source advisory: OSV:GHSA-CH48-9R3Q-PV7X...

CVE-2023-25500

Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0.rc2, resulting in potential information disclosure of class and method names in RPC responses by sending modified requests...

com.vaadin:vaadin-platform-test (>=10.0.2, <=10.0.23), org.rapidpm.vaadin:rapidpm-vaadin-cdi-m-integration-tests (00.07.04-rpm) +8 more potentially affected by CVE-2023-25500 via com.vaadin:vaadin (>=10.0.2, <=10.0.23)

com.vaadin:vaadin MAVEN version =10.0.2, =10.0.2, =01.00.00-rpm, =01.00.00-rpm, =0.3.0, =0.3.0, =0.3.0, =00.07.06-rpm - org.rapidpm:testbench-ng-tests-vaadin-v10-tb 0.3.0 Source cves: CVE-2023-25500 Source advisory: MEND:CVE-2023-25500...

com.alibaba.rsocket:alibaba-broker-server (>=1.0.1, <=1.1.2), com.beirtipol:jfixtools-reporting (1.0-beta) +129 more potentially affected by CVE-2023-25500 via com.vaadin:flow-server (>=3.0.0, <=9.1.1)

com.vaadin:flow-server MAVEN version =3.0.0, =1.0.1, =1.1.6, =15.0.0, =15.0.0, =3.2.3, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =9.1.1 and more Source cves: CVE-2023-25500 Source advisory: MEND:CVE-2023-25500...

CVE-2023-25500

Vaadin CVE-2023-25500 affects Vaadin 10.0.0–10.0.23, 11.0.0–14.10.1, 15.0.0–22.0.28, 23.0.0–23.3.13, 24.0.0–24.0.6, and 24.1.0.alpha1–24.1.0.rc2. It enables potential information disclosure of class and method names in RPC responses when requests are modified. Root cause per the documents is insu...

com.alibaba.rsocket:alibaba-broker-server (>=1.0.0.m1, <=1.0.0), com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (>=0.1, <=14.10.1) +295 more potentially affected by CVE-2023-25500 via com.vaadin:flow-server (>=1.1.0, <=2.9.2)

com.vaadin:flow-server MAVEN version =1.1.0, =1.0.0.m1, =0.1, =14.8, =3.7.0, =2.9.3, =1.0, =0.0.1, =12.0.0, =12.0.0, =1.0.0, =0.3.1, =1.0.0, =1.0.0, =0.0.3, =0.0.3.2 - com.github.mdre:pdfviewer 0.5.2 and more Source cves: CVE-2023-25500 Source advisory: MEND:CVE-2023-25500...