Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-36319

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-rjww-2x8v-m9v9

Potential sensitive data exposure in applications using Vaadin 15 Insecure configuration of default `ObjectMapper` in `com.vaadin:flow-server` versions 3.0.0 through 3.0.5 (Vaadin 15.0.0 through 15.0.4) may expose sensitive data if the application also uses e.g. `@RestController` - https://vaadin.com/security/cve-2020-36319

gitlab/maven/com.vaadin/flow-client/CVE-2020-36319

Information Exposure Insecure configuration of default ObjectMapper in `com.vaadin:flow-server` may expose sensitive data if the application also uses `@RestController`

gitlab/maven/com.vaadin/flow-server/CVE-2020-36319

Information Exposure Insecure configuration of default ObjectMapper in `com.vaadin:flow-server` may expose sensitive data if the application also uses e.g. `@RestController`

gitlab/maven/com.vaadin/vaadin-server/CVE-2020-36319

Information Exposure Insecure configuration of default `ObjectMapper` in `com.vaadin:flow-server` may expose sensitive data if the application also uses `@RestController`