Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-3h5r-928v-mxhh

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-3h5r-928v-mxhh

Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11 Missing check in UIDL request handler in `com.vaadin:flow-server` versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message. - https://vaadin.com/security/cve-2018-25007

gitlab/maven/com.vaadin/vaadin-bom/GMS-2021-63

Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11 Missing check in UIDL request handler in `com.vaadin:flow-server` versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message. - https://vaadin.com/security/cve-2018-25007