CVE-2011-0509

CVE-2011-0509

EPSS 2.1%

Cross-site scripting (XSS) vulnerability in Vaadin before 6.4.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the index page.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://dev.vaadin.com/ticket/6257 http://osvdb.org/70398 http://secunia.com/advisories/42879 https://exchange.xforce.ibmcloud.com/vulnerabilities/64626 http://vaadin.com/download/release/6.4/6.4.9/release-notes.html http://www.securityfocus.com/bid/45779