Количество 2
Количество 2
CVE-2018-25007
почти 5 лет назад
Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message.
CVSS3: 2.6
EPSS: Низкий
GHSA-jmx8-355m-8vwh
почти 5 лет назад
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
CVSS3: 2.6
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-25007 Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message. | CVSS3: 2.6 | 0% Низкий | почти 5 лет назад |
| GHSA-jmx8-355m-8vwh Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11 | CVSS3: 2.6 | 0% Низкий | почти 5 лет назад |
Уязвимостей на страницу
20