📦

flow

Vendor: vaadin

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 11 Total Indexed
Avg. EPSS 0.83% Exploit Prob.
Latest CVE CVE-2021-31412 Jun 24

Security Vulnerability Index

Page 2 / 2
2.6 CVSS
CVE-2018-25007

Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message.

EPSS: 0.57%