Skip to content
OpenAdvisories

Product · vaadin

vaadin-server

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2021-33609

    Denial of service in DataCommunicator class in Vaadin 8

    Missing check in DataCommunicator class in com.vaadin:vaadin-server versions 8.0.0 through 8.14.0 (Vaadin 8.0.0 through 8.14.0) allows authenticated network attacker to cause heap exhaustion by requesting too many rows of data.

    vaadin vaadin vaadin-server com.vaadin:vaadin-server Maven
  • Medium 4.0
    CVE-2021-31403

    Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8

    Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:vaadin-server versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 through 7.7.23), and 8.0.0 through 8.12.2 (Vaadin 8.0.0 through 8.12.2) allows attacker to guess a security token via t…

    vaadin vaadin vaadin-server com.vaadin:vaadin-bom Maven
  • Medium 5.4
    CVE-2019-25028

    Stored cross-site scripting in Grid component in Vaadin 7 and 8

    Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 (Vaadin 7.4.0 through 7.7.19), and 8.0.0 through 8.8.4 (Vaadin 8.0.0 through 8.8.4) allows attacker to inject malicious JavaScript via unspecified vector

    vaadin vaadin vaadin-server com.vaadin:vaadin-bom Maven