Business information leak In com.vaadin:vaadin
Description
Vaadin vulnerable to possible information disclosure of class and method names in RPC response
Description
Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0.rc2, resulting in potential information disclosure of class and method names in RPC responses by sending modified requests.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 maven | 10.0.24, 14.10.2, 22.1.0, 23.3.14, 24.0.7, 24.1.0 | ||
maven | 1.0.21, 2.9.3, 9.1.2, 23.3.13, 24.0.9, 24.1.0 |
Aliases
1. 2. 3. 4. 5.
References
1. 2. 3.