Insecure temporary directory usage in frontend build functionality of com.vaadin:flow-server versions 2.0.9 up to and including 2.5.2 (Vaadin 14.0.3 through Vaadin 14.5.2), 3.0 before 6.0 (Vaadin 15 before 19), and 6.0.0 up to and including 6.0.5 (Vaadin 19.0.0 up to and including 19.0.4) allows local users to inject malicious code into frontend resources during application rebuilds.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|