Description (CNA)
Improper check in CheckboxGroup in com.vaadin:vaadin-checkbox-flow versions 1.2.0 prior to 2.0.0 (Vaadin 12.0.0 prior to 14.0.0), 2.0.0 prior to 3.0.0 (Vaadin 14.0.0 prior to 14.5.0), 3.0.0 through 4.0.1 (Vaadin 15.0.0 through 17.0.11), 14.5.0 through 14.6.7 (Vaadin 14.5.0 through 14.6.7), and 18.0.0 through 20.0.5 (Vaadin 18.0.0 through 20.0.5) allows attackers to modify the value of a disabled Checkbox inside enabled CheckboxGroup component via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Vaadin / Vaadin | affected 12.0.0 before unspecified; affected unspecified before 14.0.0; affected 14.0.0 before unspecified; affected unspecified before 14.5.0; affected 15.0.0 before unspecified; affected unspecified through 17.0.11; affected 14.5.0 before unspecified; affected unspecified through 14.6.7; affected 18.0.0 before unspecified; affected unspecified through 20.0.5 |
| Vaadin / vaadin-checkbox-flow | affected 1.2.0 before unspecified; affected unspecified before 2.0.0; affected 2.0.0 before unspecified; affected unspecified before 3.0.0; affected 3.0.0 before unspecified; affected unspecified through 4.0.1; affected 14.5.0 before unspecified; affected unspecified through 14.6.7; affected 18.0.0 before unspecified; affected unspecified through 20.0.5 |
CWE
CWE-754
References
ADP enrichment
No English description supplied.