PT-2021-20230 · Vaadin · Vaadin-Server

Name of the Vulnerable Software and Affected Versions: com.vaadin:vaadin-server versions 8.0.0 through 8.14.0 Description: The issue is caused by a missing check in the DataCommunicator class, allowing an authenticated network attacker to cause heap exhaustion by requesting too many rows of data...