← Database

CVE-2023-25500

LOW CVSS: 3.5 Published: 2023-06-22 Modified: 2026-06-17

Description

Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0.rc2, resulting in potential information disclosure of class and method names in RPC responses by sending modified requests.

Affected Platforms

Vaadin Vaadin

Weakness Type

CWE-200, CWE-200

References