Lucene search
Veracode Vulnerability DatabaseVERACODE:30055HistoryApr 20, 2021 - 9:17 a.m.
Information Disclosure
2021-04-2009:17:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.001 Low
EPSS
Percentile
41.4%
flow-server is vulnerable to information disclosure. Insecure configuration of the default ObjectMapper discloses confidential data if the application also uses e.g. @RestController.
| CPE | Name | Operator | Version |
|---|---|---|---|
| flow server | le | 3.0.4 |
Related
github
github
Potential sensitive data exposure in applications using Vaadin 15
2021-04-19 14:52:14
Potential sensitive data exposure in applications using Vaadin 15
2021-04-19 14:48:26
nvd
nvd
CVE-2020-36319
2021-04-23 16:15:08
cve
cve
CVE-2020-36319
2021-04-23 16:15:08
osv
osv
Potential sensitive data exposure in applications using Vaadin 15
2021-04-19 14:48:26
Potential sensitive data exposure in applications using Vaadin 15
2021-04-19 14:52:14
CVE-2020-36319
2021-04-23 16:15:08
prion
prion
Default configuration
2021-04-23 16:15:00
cvelist
cvelist
vaadin
vaadin
Potential sensitive data exposure in applications using Vaadin 15
2020-04-21 00:00:00