Lucene search

K
osvGoogleOSV:GHSA-76F4-FW33-6J2V
HistoryApr 19, 2021 - 2:48 p.m.

Potential sensitive data exposure in applications using Vaadin 15

2021-04-1914:48:26
Google
osv.dev
10

0.001 Low

EPSS

Percentile

41.4%

Insecure configuration of default ObjectMapper in com.vaadin:flow-server versions 3.0.0 through 3.0.5 (Vaadin 15.0.0 through 15.0.4) may expose sensitive data if the application also uses e.g. @RestController

0.001 Low

EPSS

Percentile

41.4%

Related for OSV:GHSA-76F4-FW33-6J2V