CVE-2023-25500
- Source
- https://cve.org/CVERecord?id=CVE-2023-25500
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25500.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-25500
- Aliases
- Published
- 2023-06-22T12:49:06Z
- Modified
- 2026-10-24T02:47:33Z
- Severity
-
- 3.5 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0.rc2, resulting in potential information disclosure of class and method names in RPC responses by sending modified requests.
- Database specific
{ "cna_assigner": "Vaadin", "cwe_ids": [ "CWE-200" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25500.json" }- References
-
- https://repo.maven.apache.org/maven2
- https://vaadin.com/security/cve-2023-25500
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25500.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-25500
- https://github.com/vaadin/flow/pull/16935
- https://github.com/vaadin/flow
- https://github.com/vaadin/platform
Affected packages
Git / github.com/vaadin/flow
Affected ranges
- Type
- GIT
- Repo
- https://github.com/vaadin/flow
- Events
-
IntroducedFixedIntroducedFixedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*", "range": [ { "introduced": "23.0.0" }, { "fixed": "23.3.14" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*", "range": [ { "introduced": "24.0.0" }, { "fixed": "24.0.7" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha1:*:*:*:*:*:*", "range": [ { "introduced": "24.1.0-alpha1" }, { "last_affected": "24.1.0-alpha1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha2:*:*:*:*:*:*", "range": [ { "introduced": "24.1.0-alpha2" }, { "last_affected": "24.1.0-alpha2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha3:*:*:*:*:*:*", "range": [ { "introduced": "24.1.0-alpha3" }, { "last_affected": "24.1.0-alpha3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha4:*:*:*:*:*:*", "range": [ { "introduced": "24.1.0-alpha4" }, { "last_affected": "24.1.0-alpha4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha5:*:*:*:*:*:*", "range": [ { "introduced": "24.1.0-alpha5" }, { "last_affected": "24.1.0-alpha5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:vaadin:vaadin:24.1.0:alpha6:*:*:*:*:*:*", "range": [ { "introduced": "24.1.0-alpha6" }, { "last_affected": "24.1.0-alpha6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:vaadin:vaadin:24.1.0:beta1:*:*:*:*:*:*", "range": [ { "introduced": "24.1.0-beta1" }, { "last_affected": "24.1.0-beta1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:vaadin:vaadin:24.1.0:beta2:*:*:*:*:*:*", "range": [ { "introduced": "24.1.0-beta2" }, { "last_affected": "24.1.0-beta2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:vaadin:vaadin:24.1.0:beta3:*:*:*:*:*:*", "range": [ { "introduced": "24.1.0-beta3" }, { "last_affected": "24.1.0-beta3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:vaadin:vaadin:24.1.0:rc1:*:*:*:*:*:*", "range": [ { "introduced": "24.1.0-rc1" }, { "last_affected": "24.1.0-rc1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:vaadin:vaadin:24.1.0:rc2:*:*:*:*:*:*", "range": [ { "introduced": "24.1.0-rc2" }, { "last_affected": "24.1.0-rc2" } ], "source": "CPE_STRING" } ] }
- Type
- GIT
- Repo
- https://github.com/vaadin/platform
- Events
-
IntroducedLast AffectedIntroducedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "10.0.0" }, { "last_affected": "10.0.23" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "11.0.0" }, { "last_affected": "14.10.1" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "15.0.0" }, { "last_affected": "22.0.28" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" } ] }
Affected versions
10.*
10.0.0
10.0.1
10.0.10
10.0.11
10.0.12
10.0.13
10.0.14
10.0.15
10.0.16
10.0.17
10.0.18
10.0.19
10.0.2
10.0.20
10.0.21
10.0.22
10.0.23
10.0.3
10.0.4
10.0.5
10.0.6
10.0.7
10.0.8
10.0.9
11.*
11.0.0.alpha1
11.0.0.beta1
12.*
12.0.0.alpha1
12.0.0.alpha2
12.0.0.alpha3
12.0.0.alpha4
12.0.0.alpha5
12.0.0.beta1
12.0.0.beta2
13.*
13.0.0
13.0.0.alpha1
13.0.0.alpha2
13.0.0.alpha3
13.0.0.alpha4
13.0.0.beta1
13.0.0.beta2
13.0.0.beta3
13.0.1
14.*
14.0.0
14.0.0.alpha1
14.0.0.alpha2
14.0.0.alpha3
14.0.0.alpha4
14.0.0.beta1
14.0.0.beta2
14.0.0.beta3
14.0.0.rc1
14.0.0.rc2
14.0.0.rc3
14.0.0.rc4
14.0.0.rc5
14.0.0.rc6
14.0.0.rc7
14.0.0.rc9
14.0.1
14.0.2
14.1.0
14.1.0.alpha1
14.1.0.alpha3
14.1.0.beta1
14.1.0.beta2
14.1.1
14.1.2
14.10.0
14.10.0.alpha1
14.10.0.alpha2
14.10.0.alpha3
14.10.0.beta1
14.10.1
14.2.0
14.2.0.alpha1
14.2.0.alpha10
14.2.0.alpha11
14.2.0.alpha2
14.2.0.alpha3
14.2.0.alpha4
14.2.0.alpha5
14.2.0.alpha6
14.2.0.alpha7
14.2.0.alpha8
14.2.0.alpha9
14.2.0.beta1
14.2.0.rc1
14.3.0
14.3.0.alpha1
14.3.0.beta1
14.3.0.beta2
14.3.0.beta3
14.3.0.rc1
14.4.0
14.4.0.alpha1
14.4.0.beta1
14.4.0.beta2
14.4.0.rc1
14.5.0.alpha1
14.5.0.alpha2
14.5.0.alpha3
14.5.0.beta1
14.5.0.rc1
14.6.0.alpha1
14.6.0.alpha2
14.6.0.beta1
14.6.0.beta2
14.7.0
14.7.0.alpha1
14.7.0.alpha2
14.7.0.alpha3
14.7.0.beta1
14.7.0.rc1
14.8.0
14.8.0.alpha1
14.8.0.beta1
14.8.1
14.8.10
14.8.11
14.8.12
14.8.13
14.8.14
14.8.15
14.8.16
14.8.17
14.8.2
14.8.3
14.8.4
14.8.5
14.8.6
14.8.7
14.8.8
14.8.9
14.9.0
14.9.0.alpha1
14.9.0.beta1
14.9.0.rc1
14.9.1
14.9.2
14.9.3
14.9.4
15.*
15.0.0
15.0.0.rc1
16.*
16.0.0.alpha1
16.0.0.alpha2
16.0.0.alpha3
16.0.1
17.*
17.0.0
17.0.0.alpha2
17.0.0.alpha3
17.0.0.alpha4
17.0.0.alpha5
17.0.0.alpha6
17.0.0.alpha7
17.0.0.beta1
17.0.0.beta2
17.0.0.beta3
17.0.0.rc1
17.0.0.rc2
18.*
18.0.0.alpha1
18.0.0.beta1
18.0.0.beta2
19.*
19.0.0.alpha1
19.0.0.alpha2
19.0.0.alpha3
19.0.0.alpha4
19.0.0.alpha5
19.0.0.beta1
19.0.0.beta2
19.0.0.beta3
19.0.0.beta4
20.*
20.0.0.alpha3
20.0.0.alpha4
20.0.0.alpha5
20.0.0.alpha6
20.0.0.alpha7
20.0.0.alpha8
21.*
21.0.0.alpha1
21.0.0.alpha10
21.0.0.alpha2
21.0.0.alpha3
21.0.0.alpha4
21.0.0.alpha5
21.0.0.alpha6
21.0.0.alpha7
21.0.0.alpha8
21.0.0.alpha9
22.*
22.0.0
22.0.0.alpha1
22.0.0.alpha2
22.0.0.alpha3
22.0.0.alpha4
22.0.0.alpha5
22.0.0.alpha6
22.0.0.alpha7
22.0.0.alpha8
22.0.0.alpha9
22.0.0.beta1
22.0.0.beta2
22.0.0.beta3
22.0.0.rc1
22.0.1
22.0.10
22.0.11
22.0.12
22.0.13
22.0.14
22.0.15
22.0.16
22.0.17
22.0.18
22.0.2
22.0.20
22.0.21
22.0.22
22.0.23
22.0.24
22.0.25
22.0.26
22.0.27
22.0.28
22.0.3
22.0.4
22.0.5
22.0.6
22.0.7
22.0.8
22.0.9
24.*
24.0.0
24.0.1
24.0.2
24.0.3
24.0.4
24.0.5
24.0.6
24.1.0-alpha1
24.1.0-alpha2
24.1.0-alpha3
24.1.0-alpha4
24.1.0-alpha5
24.1.0-alpha6
24.1.0-beta1
24.1.0-beta2
24.1.0-beta3
24.1.0-rc1
24.1.0-rc2
24.1.0.alpha1
24.1.0.alpha2
24.1.0.alpha3
24.1.0.alpha4
24.1.0.alpha5
24.1.0.alpha6
24.1.0.alpha7
24.1.0.alpha8
24.1.0.beta1
24.1.0.beta2
24.1.0.beta3
24.1.0.beta4
24.1.0.rc1
24.1.0.rc2