Description (CNA)
Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0.rc2, resulting in potential information disclosure of class and method names in RPC responses by sending modified requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| vaadin / vaadin | affected 10.0.0 through 10.0.23; affected 11.0.0 through 14.10.1; affected 15.0.0 through 22.0.28; affected 23.0.0 through 23.3.13; affected 24.0.0 through 24.0.6; affected 24.1.0.alpha1 through 24.1.0.rc2 |
| flow / flow-server | affected 1.0.0 through 1.0.20; affected 1.1.0 through 2.9.2; affected 3.0.0 through 9.1.1; affected 23.0.0 through 23.3.12; affected 24.0.0 through 24.0.8; affected 24.1.0.alpha1 through 24.1.0.rc3 |
CWE
CWE-200
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.