Lucene search
K

Arbitrary File Upload

🗓️ 08 Oct 2025 18:04:31Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 2 Views

Vaadin server vulnerable to arbitrary file upload through metadata validation in start listener.

Related
Detection
Refs
Vulners
Node
vaadin-servervaadin-serverRange8.0.08.28.1java
OR
vaadin-servervaadin-serverRange7.0.0.beta17.7.47java
OROROROROROROROROROR
vaadin-servervaadin-serverMatch7.1.0.beta1java
OROROROROROROROROROROROROROROROROR
vaadin-servervaadin-serverMatch7.2.0.beta1java
OROROROROROROROROR
vaadin-servervaadin-serverMatch7.3.0.alpha1java
OR
vaadin-servervaadin-serverMatch7.3.0.alpha2java
OR
vaadin-servervaadin-serverMatch7.3.0.alpha3java
OR
vaadin-servervaadin-serverMatch7.3.0.beta1java
OR
vaadin-servervaadin-serverMatch7.3.0.rc1java
OROROROROROROROROROROROR
vaadin-servervaadin-serverMatch7.4.0.alpha1java
OR
vaadin-servervaadin-serverMatch7.4.0.alpha10java
OR
vaadin-servervaadin-serverMatch7.4.0.alpha11java
OR
vaadin-servervaadin-serverMatch7.4.0.alpha12java
OR
vaadin-servervaadin-serverMatch7.4.0.alpha13java
OR
vaadin-servervaadin-serverMatch7.4.0.alpha14java
OR
vaadin-servervaadin-serverMatch7.4.0.alpha2java
OR
vaadin-servervaadin-serverMatch7.4.0.alpha3java
OR
vaadin-servervaadin-serverMatch7.4.0.alpha4java
OR
vaadin-servervaadin-serverMatch7.4.0.alpha5java
OR
vaadin-servervaadin-serverMatch7.4.0.alpha6java
OR
vaadin-servervaadin-serverMatch7.4.0.alpha7java
OR
vaadin-servervaadin-serverMatch7.4.0.alpha8java
OR
vaadin-servervaadin-serverMatch7.4.0.alpha9java
OR
vaadin-servervaadin-serverMatch7.4.0.beta1java
OR
vaadin-servervaadin-serverMatch7.4.0.beta2java
OR
vaadin-servervaadin-serverMatch7.4.0.beta3java
OR
vaadin-servervaadin-serverMatch7.4.0.rc1java
OROROROROROROROROROR
vaadin-servervaadin-serverMatch7.5.0.alpha1java
OR
vaadin-servervaadin-serverMatch7.5.0.beta1java
OR
vaadin-servervaadin-serverMatch7.5.0.beta2java
OR
vaadin-servervaadin-serverMatch7.5.0.beta3java
OR
vaadin-servervaadin-serverMatch7.5.0.rc1java
OR
vaadin-servervaadin-serverMatch7.5.0.rc2java
OROROROROROROROROROROROR
vaadin-servervaadin-serverMatch7.6.0.alpha1java
OR
vaadin-servervaadin-serverMatch7.6.0.alpha2java
OROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROR
vaadin-servervaadin-serverMatch8.7.0.beta1java
OROROROROROROROROROROROROROROR
vaadin-upload-flowvaadin-upload-flowRange2.0.014.13.0java
OR
vaadin-upload-flowvaadin-upload-flowRange23.0.023.6.1java
OR
vaadin-upload-flowvaadin-upload-flowRange24.0.024.7.6java
OR
vaadinvaadinRange14.0.014.13.0java
OR
vaadinvaadinRange23.0.023.6.1java
OR
vaadinvaadinRange24.0.024.7.6java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Dec 2025 04:40Current
6.8Medium risk
Vulners AI Score6.8
CVSS 45.3
EPSS0.00127
SSVC
2