CVE-2020-36320
HIGHVaadin 7.0.0-7.7.21 - Uncontrolled Resource Consumption via EmailValidator RegEx
Title source: llmDescription
Unsafe validation RegEx in EmailValidator class in com.vaadin:vaadin-server versions 7.0.0 through 7.7.21 (Vaadin 7.0.0 through 7.7.21) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses.
References (3)
Core 3
Core References
Vendor Advisory x_refsource_misc
https://vaadin.com/security/cve-2020-36320
Exploit, Patch, Third Party Advisory x_refsource_misc
https://github.com/vaadin/framework/issues/7757
Patch, Third Party Advisory x_refsource_misc
https://github.com/vaadin/framework/pull/12104
Scores
CVSS v3
7.5
EPSS
0.0196
EPSS Percentile
77.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-400
Status
published
Products (3)
com.vaadin/vaadin-bom
7.0.0.beta1 - 7.7.22Maven
com.vaadin/vaadin-server
7.0.0.beta1 - 7.7.22Maven
vaadin/vaadin
7.0.0 - 7.7.22
Published
Apr 23, 2021
Tracked Since
Feb 18, 2026