Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Vaadin Subscribe
Filtered by product Vaadin-menu-bar
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-33611 1 Vaadin 2 Vaadin, Vaadin-menu-bar 2021-11-02 4.3 MEDIUM 6.1 MEDIUM
Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 (Vaadin 14.0.0 through 14.4.4) allows remote attackers to execute malicious JavaScript in browser by opening crafted URL