Vaadin Vulnerabilities and Affected Products
Vulnerabilities associated with vaadin-text-field-flow.
Products
Clear product- Vaadin26 vulnerabilities
- flow-server11 vulnerabilities
- vaadin-server4 vulnerabilities
- flow3 vulnerabilities
- framework2 vulnerabilities
- Designer1 vulnerability
- flow-client1 vulnerability
- vaadin-checkbox-flow1 vulnerability
- vaadin-compatibility-server1 vulnerability
- vaadin-grid-flow1 vulnerability
- vaadin-menu-bar1 vulnerability
- vaadin-spreadsheet-flow1 vulnerability
- vaadin-text-field-flow1 vulnerability
- vaadin-upload-flow1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-31405HIGH | Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17Unsafe validation RegEx in EmailField component in com.vaadin:vaadin-text-field-flow versions 2.0.4 through 2.3.2 (Vaadin 14.0.6 through 14.4.3), and 3.0.0 through 4.0.2 (Vaadin 15.0.0 through 17.0.10) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses. CWE-400Apr 23, 2021 | CVSS7.5v3.1 | EPSS1.13% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |