Executive brief
Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
Affected products
- Maven com.vaadin:vaadin-bom
Junglewise Threat Intelligence
CVE-2021-31408: Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
CVE-2021-31408 · Severity: low · CVSS 3.1 · Published 2021-04-22
Technologies: com.vaadin:vaadin-bom (Maven). Vendors: Maven.
Related threats
- Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14
- Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
- Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7
- Potential sensitive data exposure in applications using Vaadin 15