Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Vaadin Subscribe
Filtered by product Flow-server
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-33604 1 Vaadin 2 Flow-server, Vaadin 2021-07-01 1.2 LOW 2.5 LOW
URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows local user to execute arbitrary JavaScript code by opening crafted URL in browser.