CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Github Security Blog•added 2021/10/13 6:56 p.m.•27 views

Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19

Improper sanitization of path in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.14 Vaadin 10.0.0 through 10.0.18, 1.1.0 prior to 2.0.0 Vaadin 11 prior to 14, 2.0.0 through 2.6.1 Vaadin 14.0.0 through 14.6.1, and 3.0.0 through 6.0.9 Vaadin 15.0.0 through 19.0....

5.3CVSS2.5AI score0.01318EPSS

Exploits0References3Affected Software1

Cvelist•added 2021/04/23 4:5 p.m.•49 views

CVE-2019-25027 Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13

Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 Vaadin 10.0.0 through 10.0.13, and 1.1.0 through 1.4.2 Vaadin 11.0.0 through 13.0.5 allows attacker to execute malicious JavaScript via crafted URL...

6.1CVSS6.2AI score0.00668EPSS

Exploits0References2

Github Security Blog•added 2021/04/19 2:52 p.m.•63 views

Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13

6.1CVSS4.4AI score0.00668EPSS

Exploits0References5Affected Software1