Lucene search
GoogleOSV:GHSA-C99R-67X4-WHJ6HistoryJun 28, 2021 - 4:56 p.m.
Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19
2021-06-2816:56:07
Google
osv.dev
11
0.001 Low
EPSS
Percentile
23.5%
URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows local user to execute arbitrary JavaScript code by opening crafted URL in browser.
Related
veracode
veracode
Remote Code Execution (RCE)
2021-06-25 01:14:03
osv
osv
Reflected cross-site scripting in development mode handler in Vaadin
2021-06-28 16:52:45
CVE-2021-33604
2021-06-24 12:15:08
cvelist
cvelist
github
github
Reflected cross-site scripting in development mode handler in Vaadin
2021-06-28 16:52:45
vaadin
vaadin
prion
prion
Code injection
2021-06-24 12:15:00
cve
cve
CVE-2021-33604
2021-06-24 12:15:08
nvd
nvd
CVE-2021-33604
2021-06-24 12:15:08