Approved changes feed: RSS · Atom

cpe:2.3:a:vaadin:vaadin:24.1.0:beta2:*:*:*:*:*:*

part: a version: 24.1.0 update: beta2

VendorVaadin (34b94bf1-d464-500e-83b4-751a8d81d66e)
ProductVaadin (d10dbc0c-1baf-5094-9d38-78f594d3105f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/vaadin/framework purl2cpe 2026-06-01 10:12:05.483210

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25500 vulnerable 2026-06-03 14:49:32.780207 Details available
LOW (3.5)
Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0.rc2, resulting in potential information disclosure of class and method names in RPC responses by sending modified requests.
Published: 2023-06-22T12:49:06.603Z
Updated: 2024-12-05T19:59:30.912Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.