A vulnerability was found in Vaadin Flow-Server up to 2.6.1/6.0.9. It has been declared as problematic. Affected by this vulnerability is an unknown code block of the component URL Handler. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com.
Vaadin Flow-Server up to 2.6.1/6.0.9 URL encoding error
- Virtual Patching
- June 25, 2021
- 12:04 pm
Contact us to get started
CVE-2022-4126 : ABB RCCMD PRIOR 4.40 230207 HARD-CODED PASSWORD
Description Use of Default Password vulnerability in ABB RCCMD on Windows, Linux, MacOS allows Try Common or Default Usernames and
CVE-2023-25655 : BASERCMS UP TO 4.7.4 UNRESTRICTED UPLOAD
Description baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system
CVE-2023-1050 : AS KOC ENERGY WEB REPORT SYSTEM PRIOR 23.03.10 SQL INJECTION
Description Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in As Koc Energy Web Report