CVE-2023-25500

Source
https://cve.org/CVERecord?id=CVE-2023-25500
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25500.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-25500
Aliases
Published
2023-06-22T12:49:06.603Z
Modified
2026-07-08T07:59:24.264382707Z
Severity
  • 3.5 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0.rc2, resulting in potential information disclosure of class and method names in RPC responses by sending modified requests.

Database specific
{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "10.0.0"
                },
                {
                    "last_affected": "10.0.23"
                },
                {
                    "introduced": "11.0.0"
                },
                {
                    "last_affected": "14.10.1"
                },
                {
                    "introduced": "15.0.0"
                },
                {
                    "last_affected": "22.0.8"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25500.json",
    "cna_assigner": "Vaadin",
    "cwe_ids": [
        "CWE-200"
    ]
}
References

Affected packages

Git / github.com/vaadin/flow

Affected ranges

Type
GIT
Repo
https://github.com/vaadin/flow
Events
Database specific
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "23.0.0"
        },
        {
            "last_affected": "23.3.13"
        },
        {
            "last_affected": "23.3.12"
        },
        {
            "introduced": "24.0.0"
        },
        {
            "last_affected": "24.0.6"
        },
        {
            "last_affected": "24.0.8"
        },
        {
            "introduced": "24.1.0.alpha1"
        },
        {
            "last_affected": "24.1.0.rc2"
        },
        {
            "last_affected": "24.1.0.rc3"
        },
        {
            "introduced": "1.0.0"
        },
        {
            "last_affected": "1.0.20"
        },
        {
            "introduced": "1.1.0"
        },
        {
            "last_affected": "2.9.2"
        },
        {
            "introduced": "3.0.0"
        },
        {
            "last_affected": "9.1.1"
        }
    ]
}
Type
GIT
Repo
https://github.com/vaadin/platform
Events
Database specific
{
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha1:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha2:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha3:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha4:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha5:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha6:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:rc2:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.23"
        },
        {
            "introduced": "11.0.0"
        },
        {
            "fixed": "14.10.2"
        },
        {
            "introduced": "15.0.0"
        },
        {
            "last_affected": "22.0.28"
        },
        {
            "introduced": "23.0.0"
        },
        {
            "fixed": "23.3.14"
        },
        {
            "introduced": "24.0.0"
        },
        {
            "fixed": "24.0.7"
        },
        {
            "introduced": "24.1.0-alpha1"
        },
        {
            "last_affected": "24.1.0-alpha1"
        },
        {
            "introduced": "24.1.0-alpha2"
        },
        {
            "last_affected": "24.1.0-alpha2"
        },
        {
            "introduced": "24.1.0-alpha3"
        },
        {
            "last_affected": "24.1.0-alpha3"
        },
        {
            "introduced": "24.1.0-alpha4"
        },
        {
            "last_affected": "24.1.0-alpha4"
        },
        {
            "introduced": "24.1.0-alpha5"
        },
        {
            "last_affected": "24.1.0-alpha5"
        },
        {
            "introduced": "24.1.0-alpha6"
        },
        {
            "last_affected": "24.1.0-alpha6"
        },
        {
            "introduced": "24.1.0-beta1"
        },
        {
            "last_affected": "24.1.0-beta1"
        },
        {
            "introduced": "24.1.0-beta2"
        },
        {
            "last_affected": "24.1.0-beta2"
        },
        {
            "introduced": "24.1.0-beta3"
        },
        {
            "last_affected": "24.1.0-beta3"
        },
        {
            "introduced": "24.1.0-rc1"
        },
        {
            "last_affected": "24.1.0-rc1"
        },
        {
            "introduced": "24.1.0-rc2"
        },
        {
            "last_affected": "24.1.0-rc2"
        }
    ]
}
Type
GIT
Repo
https://github.com/vaadin/vaadin
Events
Database specific
{
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha1:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha2:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha3:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha4:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha5:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha6:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:vaadin:vaadin:24.1.0:rc2:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.23"
        },
        {
            "introduced": "11.0.0"
        },
        {
            "fixed": "14.10.2"
        },
        {
            "introduced": "15.0.0"
        },
        {
            "last_affected": "22.0.28"
        },
        {
            "introduced": "23.0.0"
        },
        {
            "fixed": "23.3.14"
        },
        {
            "introduced": "24.0.0"
        },
        {
            "fixed": "24.0.7"
        },
        {
            "introduced": "24.1.0-alpha1"
        },
        {
            "last_affected": "24.1.0-alpha1"
        },
        {
            "introduced": "24.1.0-alpha2"
        },
        {
            "last_affected": "24.1.0-alpha2"
        },
        {
            "introduced": "24.1.0-alpha3"
        },
        {
            "last_affected": "24.1.0-alpha3"
        },
        {
            "introduced": "24.1.0-alpha4"
        },
        {
            "last_affected": "24.1.0-alpha4"
        },
        {
            "introduced": "24.1.0-alpha5"
        },
        {
            "last_affected": "24.1.0-alpha5"
        },
        {
            "introduced": "24.1.0-alpha6"
        },
        {
            "last_affected": "24.1.0-alpha6"
        },
        {
            "introduced": "24.1.0-beta1"
        },
        {
            "last_affected": "24.1.0-beta1"
        },
        {
            "introduced": "24.1.0-beta2"
        },
        {
            "last_affected": "24.1.0-beta2"
        },
        {
            "introduced": "24.1.0-beta3"
        },
        {
            "last_affected": "24.1.0-beta3"
        },
        {
            "introduced": "24.1.0-rc1"
        },
        {
            "last_affected": "24.1.0-rc1"
        },
        {
            "introduced": "24.1.0-rc2"
        },
        {
            "last_affected": "24.1.0-rc2"
        }
    ]
}

Affected versions

1.*
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.2.0
1.2.0.alpha1
1.2.0.beta1
1.2.0.beta2
1.3.0.alpha2
1.3.0.alpha3
1.5.0.alpha1
1.5.0.alpha2
1.5.0.alpha3
1.5.0.alpha4
10.*
10.0.0
10.0.0.alpha1
10.0.0.alpha2
10.0.0.alpha3
10.0.0.alpha4
10.0.0.alpha5
10.0.0.beta1
10.0.1
10.0.10
10.0.11
10.0.12
10.0.13
10.0.14
10.0.15
10.0.16
10.0.17
10.0.18
10.0.19
10.0.2
10.0.20
10.0.21
10.0.22
10.0.3
10.0.4
10.0.5
10.0.6
10.0.7
10.0.8
10.0.9
11.*
11.0.0.alpha1
11.0.0.beta1
12.*
12.0.0.alpha1
12.0.0.alpha2
12.0.0.alpha3
12.0.0.alpha4
12.0.0.alpha5
12.0.0.beta1
12.0.0.beta2
13.*
13.0.0
13.0.0.alpha1
13.0.0.alpha2
13.0.0.alpha3
13.0.0.alpha4
13.0.0.beta1
13.0.0.beta2
13.0.0.beta3
13.0.1
14.*
14.0.0
14.0.0.alpha1
14.0.0.alpha2
14.0.0.alpha3
14.0.0.alpha4
14.0.0.beta1
14.0.0.beta2
14.0.0.beta3
14.0.0.rc1
14.0.0.rc2
14.0.0.rc3
14.0.0.rc4
14.0.0.rc5
14.0.0.rc6
14.0.0.rc7
14.0.0.rc9
14.0.1
14.0.2
14.1.0
14.1.0.alpha1
14.1.0.alpha3
14.1.0.beta1
14.1.0.beta2
14.1.1
14.1.2
14.10.0
14.10.0.alpha1
14.10.0.alpha2
14.10.0.alpha3
14.10.0.beta1
14.10.1
14.2.0
14.2.0.alpha1
14.2.0.alpha10
14.2.0.alpha11
14.2.0.alpha2
14.2.0.alpha3
14.2.0.alpha4
14.2.0.alpha5
14.2.0.alpha6
14.2.0.alpha7
14.2.0.alpha8
14.2.0.alpha9
14.2.0.beta1
14.2.0.rc1
14.3.0
14.3.0.alpha1
14.3.0.beta1
14.3.0.beta2
14.3.0.beta3
14.3.0.rc1
14.4.0
14.4.0.alpha1
14.4.0.beta1
14.4.0.beta2
14.4.0.rc1
14.5.0.alpha1
14.5.0.alpha2
14.5.0.alpha3
14.5.0.beta1
14.5.0.rc1
14.6.0.alpha1
14.6.0.alpha2
14.6.0.beta1
14.6.0.beta2
14.7.0
14.7.0.alpha1
14.7.0.alpha2
14.7.0.alpha3
14.7.0.beta1
14.7.0.rc1
14.8.0
14.8.0.alpha1
14.8.0.beta1
14.8.1
14.8.10
14.8.11
14.8.12
14.8.13
14.8.14
14.8.15
14.8.16
14.8.17
14.8.2
14.8.3
14.8.4
14.8.5
14.8.6
14.8.7
14.8.8
14.8.9
14.9.0
14.9.0.alpha1
14.9.0.beta1
14.9.0.rc1
14.9.1
14.9.2
14.9.3
14.9.4
2.*
2.0.0
2.0.0.alpha5
2.0.0.beta1
2.0.0.beta2
2.0.0.rc1
2.0.0.rc2
2.0.0.rc3
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.1.0.alpha1
2.1.0.beta1
2.1.0.beta3
2.2.0.alpha1
2.2.0.alpha10
2.2.0.alpha11
2.2.0.alpha12
2.2.0.alpha13
2.2.0.alpha14
2.2.0.alpha15
2.2.0.alpha16
2.2.0.alpha2
2.2.0.alpha3
2.2.0.alpha4
2.2.0.alpha5
2.2.0.alpha6
2.2.0.alpha7
2.2.0.alpha8
2.2.0.alpha9
2.2.0.beta1
2.2.0.beta2
2.2.0.rc1
2.2.alpha14
2.3.0
2.3.0.alpha1
2.3.0.beta1
2.3.0.beta2
2.3.0.beta3
2.3.1
2.3.2
2.3.3
2.3.4
2.4.0
2.4.0.alpha1
2.4.0.beta1
2.4.0.beta2
2.5.0.alpha1
2.5.0.alpha2
2.6.0.alpha1
2.6.0.beta1
2.6.0.beta2
2.6.0.rc1
2.7.0
2.7.0.alpha1
2.7.0.alpha2
2.7.0.beta1
2.7.0.rc1
2.7.1
2.7.2
2.7.3
2.7.4
2.8.0
2.8.0.alpha1
2.8.0.beta1
2.8.0.rc1
2.8.1
2.8.2
2.8.3
2.8.4
2.8.5
2.9.0
2.9.0.alpha1
2.9.0.alpha2
2.9.0.beta1
2.9.0.rc1
2.9.1
2.9.2
23.*
23.0.0
23.1.0.alpha1
23.1.0.alpha2
23.1.0.alpha3
23.1.0.alpha4
23.1.0.beta1
23.2.0
23.2.0.alpha1
23.2.0.alpha2
23.2.0.alpha3
23.2.0.beta1
23.2.0.beta2
23.2.0.beta3
23.2.0.beta4
23.2.0.rc1
23.2.0.rc2
23.3.0
23.3.0.alpha1
23.3.0.alpha2
23.3.0.alpha3
23.3.0.beta1
23.3.0.beta2
23.3.0.beta3
23.3.0.beta4
23.3.0.rc1
23.3.0.rc2
23.3.1
23.3.10
23.3.11
23.3.12
23.3.13
23.3.2
23.3.3
23.3.4
23.3.5
23.3.6
23.3.7
23.3.8
23.3.9
24.*
24.0.0
24.0.1
24.0.2
24.0.3
24.0.4
24.0.5
24.0.6
24.0.7
24.0.8
24.1.0-alpha1
24.1.0-alpha2
24.1.0-alpha3
24.1.0-alpha4
24.1.0-alpha5
24.1.0-alpha6
24.1.0-beta1
24.1.0-beta2
24.1.0-beta3
24.1.0-rc1
24.1.0-rc2
24.1.0.alpha1
24.1.0.alpha2
24.1.0.alpha3
24.1.0.alpha4
24.1.0.alpha5
24.1.0.alpha6
24.1.0.alpha7
24.1.0.alpha8
24.1.0.beta1
24.1.0.beta2
24.1.0.beta3
24.1.0.beta4
24.1.0.rc1
24.1.0.rc2
24.1.0.rc3
3.*
3.0.0.alpha17
3.0.0.alpha5
3.0.0.beta1
3.0.0.beta2
3.0.0.beta3
3.0.0.beta4
3.2.0.alpha1
3.2.0.alpha2
3.2.0.alpha3
3.2.0.alpha4
3.2.0.alpha5
3.2.0.alpha6
3.2.0.alpha7
4.*
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.beta1
5.*
5.0.0.alpha1
5.0.0.beta1
6.*
6.0.0.alpha1
6.0.0.alpha2
6.0.0.alpha3
6.0.0.alpha4
6.0.0.alpha5
6.0.0.beta1
7.*
7.0.0.alpha1
7.0.0.alpha2
7.0.0.alpha3
7.0.0.alpha4
7.0.0.alpha5
7.0.0.alpha6
7.0.0.alpha7
7.0.0.beta1
8.*
8.0.0.alpha1
8.0.0.alpha10
8.0.0.alpha2
8.0.0.alpha3
8.0.0.alpha4
8.0.0.alpha5
8.0.0.alpha6
8.0.0.alpha7
8.0.0.alpha8
8.0.0.alpha9
9.*
9.0.0
9.0.0.alpha1
9.0.0.alpha10
9.0.0.alpha11
9.0.0.alpha2
9.0.0.alpha3
9.0.0.alpha4
9.0.0.alpha5
9.0.0.alpha6
9.0.0.alpha7
9.0.0.alpha8
9.0.0.alpha9
9.0.0.beta1
9.0.0.beta2
9.0.0.beta3
9.0.0.beta4
9.0.0.rc1
9.0.1
9.0.10
9.0.11
9.0.12
9.0.13
9.0.14
9.0.15
9.0.16
9.0.17
9.0.18
9.0.19
9.0.2
9.0.20
9.0.21
9.0.22
9.0.23
9.0.24
9.0.25
9.0.26
9.0.3
9.0.4
9.0.5
9.0.6
9.0.7
9.0.8
9.0.9
9.1.0
9.1.0.alpha1
9.1.1
v10.*
v10.0.0
v10.0.1
v10.0.10
v10.0.11
v10.0.12
v10.0.13
v10.0.14
v10.0.15
v10.0.16
v10.0.17
v10.0.18
v10.0.19
v10.0.2
v10.0.20
v10.0.21
v10.0.22
v10.0.3
v10.0.4
v10.0.5
v10.0.6
v10.0.7
v10.0.8
v10.0.9
v11.*
v11.0.0-alpha1
v11.0.0-beta1
v12.*
v12.0.0
v12.0.0-alpha1
v12.0.0-alpha2
v12.0.0-alpha3
v12.0.0-alpha4
v12.0.0-alpha5
v12.0.0-beta1
v12.0.0-beta2
v12.0.1
v12.0.2
v13.*
v13.0.0
v13.0.0-alpha1
v13.0.0-alpha2
v13.0.0-alpha3
v13.0.0-alpha4
v13.0.0-beta1
v13.0.0-beta2
v13.0.0-beta3
v13.0.1
v14.*
v14.0.0
v14.0.0-alpha1
v14.0.0-alpha2
v14.0.0-alpha3
v14.0.0-alpha4
v14.0.0-beta1
v14.0.0-beta2
v14.0.0-beta3
v14.0.0-rc1
v14.0.0-rc2
v14.0.0-rc3
v14.0.0-rc4
v14.0.0-rc5
v14.0.0-rc6
v14.0.0-rc7
v14.0.0-rc8
v14.0.0-rc9
v14.0.1
v14.0.2
v14.1.0
v14.1.0-alpha1
v14.1.0-alpha2
v14.1.0-alpha3
v14.1.0-alpha4
v14.1.0-alpha5
v14.1.0-beta1
v14.1.0-beta2
v14.1.0-beta3
v14.1.0-rc1
v14.1.1
v14.1.2
v14.10.0
v14.10.0-alpha1
v14.10.0-alpha2
v14.10.0-alpha3
v14.10.0-beta1
v14.10.1
v14.2.0
v14.2.0-alpha1
v14.2.0-alpha10
v14.2.0-alpha11
v14.2.0-alpha2
v14.2.0-alpha3
v14.2.0-alpha4
v14.2.0-alpha5
v14.2.0-alpha6
v14.2.0-alpha7
v14.2.0-alpha8
v14.2.0-alpha9
v14.2.0-beta1
v14.2.0-rc1
v14.3.0
v14.3.0-alpha1
v14.3.0-beta1
v14.3.0-beta2
v14.3.0-beta3
v14.3.0-rc1
v14.4.0
v14.4.0-alpha1
v14.4.0-beta1
v14.4.0-beta2
v14.4.0-rc1
v14.5.0-alpha1
v14.5.0-alpha2
v14.5.0-alpha3
v14.5.0-beta1
v14.5.0-rc1
v14.6.0-alpha1
v14.6.0-alpha2
v14.6.0-beta1
v14.6.0-beta2
v14.7.0-alpha1
v14.7.0-alpha2
v14.7.0-alpha3
v14.7.0-beta1
v14.7.0-rc1
v14.8.0
v14.8.0-alpha1
v14.8.0-beta1
v14.8.1
v14.8.10
v14.8.11
v14.8.12
v14.8.13
v14.8.14
v14.8.15
v14.8.16
v14.8.17
v14.8.2
v14.8.3
v14.8.4
v14.8.5
v14.8.6
v14.8.7
v14.8.8
v14.8.9
v14.9.0
v14.9.0-alpha1
v14.9.0-beta1
v14.9.0-rc1
v14.9.1
v14.9.2
v14.9.3
v14.9.4
v23.*
v23.0.0
v23.1.0-alpha1
v23.1.0-alpha2
v23.1.0-alpha3
v23.1.0-alpha4
v23.1.0-beta1
v23.2.0
v23.2.0-alpha1
v23.2.0-alpha3
v23.2.0-beta1
v23.2.0-beta2
v23.2.0-beta3
v23.2.0-beta4
v23.2.0-rc1
v23.3.0
v23.3.0-alpha1
v23.3.0-alpha2
v23.3.0-alpha3
v23.3.0-beta1
v23.3.0-beta2
v23.3.0-rc1
v23.3.1
v23.3.10
v23.3.11
v23.3.12
v23.3.13
v23.3.2
v23.3.3
v23.3.4
v23.3.5
v23.3.6
v23.3.7
v23.3.8
v23.3.9
v24.*
v24.0.0
v24.0.1
v24.0.2
v24.0.3
v24.0.4
v24.0.5
v24.0.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25500.json"