{"action":"Upgrade com.vaadin:vaadin-bom to 19.0.4 or later.","affected":[{"fixed":"19.0.4","introduced":"18.0.0"}],"component":"com.vaadin:vaadin-bom","cve_ids":["CVE-2021-31408"],"ecosystem":"Maven","epss":0.00322,"exploited":false,"fixed_versions":["19.0.4"],"ghsa_id":"GHSA-mr8h-j9cv-4m8h","id":"tcs_01M5N95P64ZKAFY49H86VBC9HZ","modified_at":"2023-11-08T04:05:48.406430Z","published_at":"2021-04-22T16:11:17Z","references":["https://osv.dev/vulnerability/GHSA-mr8h-j9cv-4m8h","https://github.com/vaadin/platform/security/advisories/GHSA-mr8h-j9cv-4m8h","https://nvd.nist.gov/vuln/detail/CVE-2021-31408","https://github.com/vaadin/flow/pull/10577","https://vaadin.com/security/cve-2021-31408"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-mr8h-j9cv-4m8h","url":"https://osv.dev/vulnerability/GHSA-mr8h-j9cv-4m8h"}],"summary":"Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19"}