Vaadin Framework resource management error vulnerability

A security vulnerability exists in Vaadin Framework versions 8.16.0 through 8.32.1. It arises because requestEnd reads the v-uiId request parameter outside of the code block responsible for releasing the session lock. Since the value is not a numeric v-uiId, Integer.parseInt throws an exception,...