Executive brief
Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14
Affected products
- Maven org.webjars.bowergithub.vaadin:vaadin-menu-bar
- Maven com.vaadin:vaadin-bom
Junglewise Threat Intelligence
CVE-2021-33611: Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14
CVE-2021-33611 · Severity: low · CVSS 3.1 · Published 2021-11-03
Technologies: com.vaadin:vaadin-bom (Maven). Vendors: Maven.
Related threats
- Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
- Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
- Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7
- Potential sensitive data exposure in applications using Vaadin 15