Maven/com.vaadin:vaadin-bom: medium 5.9
Directory traversal in development mode handler in Vaadin 14 and 15-17
Action: Upgrade com.vaadin:vaadin-bom to 14.4.3 (14.x) or 18.0.0 (18.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 14.0.0 | 14.4.3 | - |
| 15.0.0 | 18.0.0 | - |
Fixed versions
| 14.4.3 | 18.0.0 |
Sources
- osv: GHSA-82mf-mmh7-hxp5
- https://github.com/vaadin/platform/security/advisories/GHSA-82mf-mmh7-hxp5
- https://github.com/vaadin/platform
- https://vaadin.com/security/cve-2020-36321
published · modified · JSON