Skip to content
OpenAdvisories

Product · vaadin

flow-server

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2021-31407

    Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19

    Vulnerability in OSGi integration in com.vaadin:flow-server versions 1.2.0 through 2.4.7 (Vaadin 12.0.0 through 14.4.9), and 6.0.0 through 6.0.1 (Vaadin 19.0.0) allows attacker to access application classes and resources on the server via crafted HTTP request.

    vaadin vaadin flow-server com.vaadin:flow-server Maven