Information disclosure

2023-06-2213:15:00

PRIOn knowledge base

www.prio-n.com

vaadin

versions

potential information disclosure

rpc responses

modified requests

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.7%

JSON

Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0.rc2, resulting in potential information disclosure of class and method names in RPC responses by sending modified requests.

CPENameOperatorVersion
vaadineq24.1.0 alpha2
vaadineq24.1.0 alpha3
vaadineq24.1.0 alpha4
vaadineq24.1.0 alpha5
vaadineq24.1.0 alpha6
vaadineq24.1.0 beta1
vaadinge10.0.0
vaadinlt10.0.23
vaadineq24.1.0 alpha1
vaadinge15.0.0

Name	Operator	Version
vaadin	eq	24.1.0 alpha2
vaadin	eq	24.1.0 alpha3
vaadin	eq	24.1.0 alpha4
vaadin	eq	24.1.0 alpha5
vaadin	eq	24.1.0 alpha6
vaadin	eq	24.1.0 beta1
vaadin	ge	10.0.0
vaadin	lt	10.0.23
vaadin	eq	24.1.0 alpha1
vaadin	ge	15.0.0