Lucene search
GoogleOSV:GHSA-JQJ4-R483-4GVRHistoryApr 19, 2021 - 2:48 p.m.
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
2021-04-1914:48:51
Google
osv.dev
8
0.001 Low
EPSS
Percentile
36.1%
Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 (Vaadin 10.0.0 through 10.0.13), and 1.1.0 through 1.4.2 (Vaadin 11.0.0 through 13.0.5) allows attacker to execute malicious JavaScript via crafted URL.
Related
vaadin
vaadin
veracode
veracode
Cross-Site Scripting (XSS)
2021-04-20 07:43:35
Cross-Site Scripting (XSS)
2021-04-20 08:53:26
osv
osv
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
2021-04-19 14:52:29
CVE-2019-25027
2021-04-23 16:15:07
nvd
nvd
CVE-2019-25027
2021-04-23 16:15:07
cve
cve
CVE-2019-25027
2021-04-23 16:15:07
cvelist
cvelist
github
github
prion
prion
Design/Logic Flaw
2021-04-23 16:15:00