Medium
CVE-2021-33611
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filters
High
ghsa-jfmf-w293-8xr8
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Medium
ghsa-hw7r-qrhp-5pff
Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20
Low
CVE-2021-33604
Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19
Medium
CVE-2021-31412
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
High
CVE-2021-31411
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
Medium
CVE-2021-31408
Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
Medium
CVE-2021-31403
Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8
Medium
CVE-2019-25028
Stored cross-site scripting in Grid component in Vaadin 7 and 8
High
CVE-2020-36320
Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7
Low
ghsa-3h5r-928v-mxhh
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
Medium
ghsa-jqj4-r483-4gvr
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Low
ghsa-76f4-fw33-6j2v
Potential sensitive data exposure in applications using Vaadin 15
Medium
ghsa-82mf-mmh7-hxp5
Directory traversal in development mode handler in Vaadin 14 and 15-17
Medium
ghsa-c6c4-7x48-4cqp
Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
High
CVE-2021-31405
Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17
Medium
ghsa-9h6g-6mxg-vvp4
Timing side channel vulnerability in endpoint request handler in Vaadin 15-19
High
ghsa-j9wr-49vq-rm5g
Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.