Skip to content
OpenAdvisories

Vendor

Flow

2 known vulnerabilities.

Products

flow-server 1 Flow Payment 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.5
    CVE-2023-25500

    Vaadin vulnerable to possible information disclosure of class and method names in RPC response

    Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0.rc2, resulting in potential information disclosure of class and method names in RPC responses by se…

    vaadin Flow vaadin flow-server Maven