Lucene search

K
osvGoogleOSV:CVE-2019-25027
HistoryApr 23, 2021 - 4:15 p.m.

CVE-2019-25027

2021-04-2316:15:07
Google
osv.dev
3

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.1%

Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 (Vaadin 10.0.0 through 10.0.13), and 1.1.0 through 1.4.2 (Vaadin 11.0.0 through 13.0.5) allows attacker to execute malicious JavaScript via crafted URL

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.1%