tocsin

CVE-2025-15022

3 advisories.

Maven/com.vaadin:vaadin-server CVE-2025-15022: medium

Vaadin vulnerable to Cross-site Scripting

Action: Upgrade com.vaadin:vaadin-server to 7.7.50 (7.x) or 8.30.0 (8.x) or later.

Affected

introducedfixedlast affected
7.0.07.7.50-
8.0.08.30.0-

Fixed versions

7.7.508.30.0

Sources

CVE-2025-15022 · published · modified · JSON

Maven/com.vaadin:vaadin CVE-2025-15022: medium

Vaadin vulnerable to Cross-site Scripting

Action: Upgrade com.vaadin:vaadin to 23.6.6 (23.6.x), 24.8.14 (24.8.x) or 24.9.7 (24.9.x) or later.

Affected

introducedfixedlast affected
23.1.023.6.6-
24.0.024.8.14-
24.9.024.9.7-

Fixed versions

23.6.624.8.1424.9.7

Sources

CVE-2025-15022 · published · modified · JSON

Maven/com.vaadin:vaadin-spreadsheet-flow CVE-2025-15022: medium

Vaadin vulnerable to Cross-site Scripting

Action: Upgrade com.vaadin:vaadin-spreadsheet-flow to 23.6.6 (23.6.x), 24.8.14 (24.8.x) or 24.9.7 (24.9.x) or later.

Affected

introducedfixedlast affected
23.1.023.6.6-
24.0.024.8.14-
24.9.024.9.7-

Fixed versions

23.6.624.8.1424.9.7

Sources

CVE-2025-15022 · published · modified · JSON