CVE-2025-9467
1 advisory.
Maven/com.vaadin:vaadin-server CVE-2025-9467: medium
Vaadin Framework possible file bypass via upload validation on the server-side
Action: Upgrade com.vaadin:vaadin-server to 7.7.48 (7.x) or 8.28.2 (8.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.7.48 | - |
| 8.0.0 | 8.28.2 | - |
Fixed versions
| 7.7.48 | 8.28.2 |
Sources
- osv: GHSA-9gfh-4fwj-w3rj
- https://github.com/vaadin/framework/security/advisories/GHSA-9gfh-4fwj-w3rj
- https://nvd.nist.gov/vuln/detail/CVE-2025-9467
- https://github.com/vaadin/flow-components/pull/7616
- https://github.com/vaadin/flow-components/commit/bfe9e507cdcc5d90a2312c8f0162f798a29ba635
- https://github.com/vaadin/framework
- https://vaadin.com/security/cve-2025-9467
CVE-2025-9467 · published · modified · JSON