Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass due to inconsistent path pattern matching of reserved framework paths. An attacker can create unauthorized sessions and trigger framework initialization by accessing the /VAADIN endpoint without a trailing slash,...

EUVD-2021-0858

Malware in sbrugna...

EUVD-2021-0734

Malware in sbrugna...

Vaadin 信息泄露漏洞

Vaadin is an open source platform for web application development from Vaadin Open Source.The Vaadin platform consists of a set of web components, a Java web framework, and a set of tools and application launchers. A security vulnerability exists in Vaadin that stems from the fact that when an...

CVE-2011-0509

Cross-site scripting XSS vulnerability in Vaadin before 6.4.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the index page...