Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 up to and including 7.7.19 (Vaadin 7.4.0 up to and including 7.7.19), and 8.0.0 up to and including 8.8.4 (Vaadin 8.0.0 up to and including 8.8.4) allows malicious user to inject malicious JavaScript via unspecified vector
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
vaadin vaadin |