Description

Cross-site scripting (XSS) vulnerability in Vaadin before 6.4.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the index page.

Remediation

References

http://dev.vaadin.com/ticket/6257

http://osvdb.org/70398

http://secunia.com/advisories/42879

http://vaadin.com/download/release/6.4/6.4.9/release-notes.html

http://www.securityfocus.com/bid/45779

https://exchange.xforce.ibmcloud.com/vulnerabilities/64626

Related Vulnerabilities

CVE-2020-2217 Vulnerability in maven package org.jenkins-ci.plugins:compatibility-action-storage

CVE-2022-34870 Vulnerability in maven package org.apache.geode:geode-pulse

CVE-2022-4244 Vulnerability in maven package org.codehaus.plexus:plexus-utils

CVE-2023-26056 Vulnerability in maven package org.xwiki.platform:xwiki-platform-rendering-macro-context

CVE-2022-36914 Vulnerability in maven package org.jenkins-ci.plugins:files-found-trigger

Severity

Critical

Tags

Issue Tracking Vendor Advisory Broken Link Third Party Advisory VDB Entry CWE-79