Lucene search
Veracode Vulnerability DatabaseVERACODE:30059HistoryApr 21, 2021 - 2:56 a.m.
Remote Code Execution (RCE)
2021-04-2102:56:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
rce vulnerability exploit
flow-server
synchronization message
server-side element
software
EPSS
0.001
Percentile
22.7%
flow-server is vulnerable to remote code execution. An attacker is able to exploit the vulnerability by sending a fake synchronization message to the server, updating server-side element property values.
Related
cve
cve
CVE-2018-25007
2021-04-23 16:15:07
osv
osv
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
2021-04-19 14:49:13
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
2021-04-19 14:53:09
CVE-2018-25007
2021-04-23 16:15:07
vaadin
vaadin
github
github
prion
prion
Design/Logic Flaw
2021-04-23 16:15:00
nvd
nvd
CVE-2018-25007
2021-04-23 16:15:07
cvelist
cvelist