{"id":"CVE-2023-25499","summary":"Possible information disclosure in non visible components","details":"When adding non-visible components to the UI in server side, content is sent to the browser in Vaadin 10.0.0 through 10.0.22, 11.0.0 through 14.10.0, 15.0.0 through 22.0.28, 23.0.0 through 23.3.12, 24.0.0 through 24.0.5 and 24.1.0.alpha1 to 24.1.0.beta1, resulting in potential information disclosure.","aliases":["GHSA-5f9v-mv5g-jh5q"],"modified":"2026-09-16T08:29:34.270543Z","published":"2023-06-22T12:47:57.760Z","database_specific":{"cna_assigner":"Vaadin","cwe_ids":["CWE-200"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25499.json"},"references":[{"type":"WEB","url":"https://vaadin.com/security/CVE-2023-25499"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25499.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25499"},{"type":"FIX","url":"https://github.com/vaadin/flow/pull/15885"},{"type":"PACKAGE","url":"https://github.com/vaadin/flow"},{"type":"PACKAGE","url":"https://github.com/vaadin/platform"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/vaadin/flow","events":[{"introduced":"4b89940744f55a8ee83463771972dec51c92e68c"},{"last_affected":"6f1a23ba7520777a7e437a8d51ce05feff4b7c0a"},{"last_affected":"5b843527f9b22567fd7ae734beca12ffe7e4cf24"},{"introduced":"f5bd08834302a4f461b920dea6d0be8808e88a50"},{"last_affected":"4894b71af3ceeceab47ed3ccfeae98a27c6f4a7e"},{"last_affected":"312025c46d342a50012c0b76544f5ce8310cd55a"},{"introduced":"a27538307d6b0c6833ef59ececf8d08291976cf9"},{"last_affected":"d90fb57475345e916e9b353cf851ca6d974e3dd5"},{"introduced":"3cd0c02025aba6de6fd78a8ea65c67483a721b4e"},{"last_affected":"5a5d5c5e391dc180bcfb613afbc88417ebd722b6"},{"introduced":"6b0da5b1d88e4541bebb4f26ef799b3f407bb74e"},{"last_affected":"a16d84160cdd230e1049a005943d943f0be6fdf9"},{"introduced":"b260fc5765fe0a3b9b4eef5e34f0ee97161d9c49"},{"fixed":"796a4daf95fa8e3480138f303cf8c7ce9ef511f9"},{"introduced":"4b6ca4330163c4e976b32d03880fe2154a9d1ca7"},{"last_affected":"4374c0d7390bb0bc4cbc05ba1862e8e5c6ef749e"}],"database_specific":{"extracted_events":[{"introduced":"23.0.0"},{"last_affected":"23.3.12"},{"last_affected":"23.3.10"},{"introduced":"24.0.0"},{"last_affected":"24.0.5"},{"last_affected":"24.0.7"},{"introduced":"24.1.0.alpha1"},{"last_affected":"24.1.0.beta1"},{"introduced":"1.0.0"},{"last_affected":"1.0.19"},{"introduced":"1.1.0"},{"last_affected":"2.8.9"},{"introduced":"2.9.0"},{"fixed":"2.9.1"},{"introduced":"3.0.0"},{"last_affected":"9.1.0"}],"source":"AFFECTED_FIELD"}},{"type":"GIT","repo":"https://github.com/vaadin/platform","events":[{"introduced":"8e1b5f1a3f9bb984108d172f19d4d2df4a1987f5"},{"fixed":"e197c9425d8ce8a0c0a9048ca8ac68e75c4950aa"},{"introduced":"b1b5f755102e03fab90c511f4b207d394cbca8fb"},{"fixed":"4b28a8175c3a4ccdb7c41f657f84b8116f3f627b"},{"introduced":"354ad0186b5e61b548adad84de03af297dc6f2a6"},{"last_affected":"d9fa348af6eda13450c2f362530b9c5e4947eb1c"},{"introduced":"0b73a5a157b036577d09a9f65559714246ab6e6e"},{"fixed":"026264aea28a1c1348298c45220d5a7ad84d3ff4"},{"introduced":"6aea8fa5fdf6b2c7645a54e1bc38978ee40b26df"},{"fixed":"5a12deb876906139be337642df8832b289e2c9bd"},{"introduced":"19c9f075a77ef97bddeb1af05d97472e6a47b432"},{"last_affected":"910b26a69cff26baf60e00b7fc5d71cff81ba38f"}],"database_specific":{"cpe":["cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*","cpe:2.3:a:vaadin:vaadin:24.1.0:alpha1:*:*:*:*:*:*","cpe:2.3:a:vaadin:vaadin:24.1.0:alpha2:*:*:*:*:*:*","cpe:2.3:a:vaadin:vaadin:24.1.0:alpha3:*:*:*:*:*:*","cpe:2.3:a:vaadin:vaadin:24.1.0:alpha4:*:*:*:*:*:*","cpe:2.3:a:vaadin:vaadin:24.1.0:alpha5:*:*:*:*:*:*","cpe:2.3:a:vaadin:vaadin:24.1.0:alpha6:*:*:*:*:*:*","cpe:2.3:a:vaadin:vaadin:24.1.0:beta1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"10.0.0"},{"fixed":"10.0.23"},{"introduced":"11.0.0"},{"fixed":"14.10.1"},{"introduced":"15.0.0"},{"last_affected":"22.0.28"},{"introduced":"23.0.0"},{"fixed":"23.3.13"},{"introduced":"24.0.0"},{"fixed":"24.0.6"},{"introduced":"24.1.0-alpha1"},{"last_affected":"24.1.0-alpha1"},{"introduced":"24.1.0-alpha2"},{"last_affected":"24.1.0-alpha2"},{"introduced":"24.1.0-alpha3"},{"last_affected":"24.1.0-alpha3"},{"introduced":"24.1.0-alpha4"},{"last_affected":"24.1.0-alpha4"},{"introduced":"24.1.0-alpha5"},{"last_affected":"24.1.0-alpha5"},{"introduced":"24.1.0-alpha6"},{"last_affected":"24.1.0-alpha6"},{"introduced":"24.1.0-beta1"},{"last_affected":"24.1.0-beta1"}],"source":["CPE_RANGE","CPE_STRING"]}},{"type":"GIT","repo":"https://github.com/vaadin/vaadin","events":[{"introduced":"7ac406600a3c1a228e15ba253fe844f7e13771a0"},{"fixed":"7a9403dc6515f4ecd99a169339b43f3d6b096064"},{"introduced":"75cb16838a5b87c6e1a15b9e453e0d7c90cc1d53"},{"fixed":"954586e69fb7d7fe301dfead80e5859e23686357"},{"introduced":"9efda1b1e0a27769eef9292dd7799d8fea77e633"},{"last_affected":"5822e673320817e8dc9baf6015f271afe07cef24"},{"introduced":"e107b1973a390cafc749031e033f37de7b9a4a1f"},{"fixed":"d84509ab9238212ebba0dce7b17d25729292ff95"},{"introduced":"a45cc881358732b3d594b20750f1369a65d7237a"},{"fixed":"7e7de81e736b39082b08da388f8f6bd99ceee451"},{"introduced":"b5c441f2178926e003653d466d09d8fb40f7c35f"},{"last_affected":"dc2b36aeeb51e7d1c2dcc349d051d9a0a44228cc"}],"database_specific":{"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*","cpe:2.3:a:vaadin:vaadin:24.1.0:alpha1:*:*:*:*:*:*","cpe:2.3:a:vaadin:vaadin:24.1.0:alpha2:*:*:*:*:*:*","cpe:2.3:a:vaadin:vaadin:24.1.0:alpha3:*:*:*:*:*:*","cpe:2.3:a:vaadin:vaadin:24.1.0:alpha4:*:*:*:*:*:*","cpe:2.3:a:vaadin:vaadin:24.1.0:alpha5:*:*:*:*:*:*","cpe:2.3:a:vaadin:vaadin:24.1.0:alpha6:*:*:*:*:*:*","cpe:2.3:a:vaadin:vaadin:24.1.0:beta1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"10.0.0"},{"fixed":"10.0.23"},{"introduced":"11.0.0"},{"fixed":"14.10.1"},{"introduced":"15.0.0"},{"last_affected":"22.0.28"},{"introduced":"23.0.0"},{"fixed":"23.3.13"},{"introduced":"24.0.0"},{"fixed":"24.0.6"},{"introduced":"24.1.0-alpha1"},{"last_affected":"24.1.0-alpha1"},{"introduced":"24.1.0-alpha2"},{"last_affected":"24.1.0-alpha2"},{"introduced":"24.1.0-alpha3"},{"last_affected":"24.1.0-alpha3"},{"introduced":"24.1.0-alpha4"},{"last_affected":"24.1.0-alpha4"},{"introduced":"24.1.0-alpha5"},{"last_affected":"24.1.0-alpha5"},{"introduced":"24.1.0-alpha6"},{"last_affected":"24.1.0-alpha6"},{"introduced":"24.1.0-beta1"},{"last_affected":"24.1.0-beta1"}]}}],"versions":["24.1.0-alpha1","24.1.0-alpha2","24.1.0-alpha3","24.1.0-alpha4","24.1.0-alpha5","24.1.0-alpha6","24.1.0-beta1","23.3.12","1.0.19","23.3.11","9.1.0","2.8.9","24.1.0.beta1","23.3.10","24.1.0.alpha8","2.9.0.rc1","2.9.0","24.1.0.alpha7","24.1.0.alpha6","24.0.7","24.1.0.alpha5","24.1.0.alpha4","24.0.6","9.1.0.alpha1","23.3.9","2.8.8","24.0.5","23.3.8","24.1.0.alpha3","2.8.7","23.3.7","24.0.4","24.1.0.alpha2","24.0.3","23.3.6","24.0.2","2.8.6","24.1.0.alpha1","24.0.1","23.3.5","1.0.18","24.0.0","1.0.17","9.0.26","2.8.5","23.3.4","2.8.4","9.0.25","23.3.3","2.8.3","9.0.24","23.3.2","9.0.23","23.3.1","2.8.2","23.3.0","23.3.0.rc2","23.3.0.rc1","23.3.0.beta4","23.3.0.beta3","9.0.22","2.8.1","23.3.0.beta2","23.3.0.beta1","23.3.0.alpha3","23.3.0.alpha2","2.8.0","2.8.0.rc1","2.8.0.beta1","2.8.0.alpha1","9.0.21","23.3.0.alpha1","9.0.20","9.0.19","23.2.0","23.2.0.rc2","23.2.0.rc1","23.2.0.beta3","9.0.18","23.2.0.beta2","23.2.0.beta1","9.0.17","23.2.0.alpha2","23.2.0.alpha1","9.0.16","1.0.16","9.0.15","9.0.14","9.0.13","23.1.0.beta1","23.1.0.alpha4","23.1.0.alpha3","9.0.12","23.1.0.alpha2","9.0.11","23.1.0.alpha1","9.0.10","9.0.9","9.0.8","9.0.7","9.0.6","10.0.0.beta1","9.0.5","10.0.0.alpha5","9.0.4","10.0.0.alpha4","9.0.3","10.0.0.alpha3","10.0.0.alpha2","10.0.0.alpha1","9.0.2","9.0.1","9.0.0","9.0.0.rc1","2.7.4","9.0.0.beta4","9.0.0.beta3","2.7.3","9.0.0.beta2","9.0.0.beta1","9.0.0.alpha11","9.0.0.alpha10","2.7.2","9.0.0.alpha9","9.0.0.alpha8","9.0.0.alpha7","9.0.0.alpha6","2.7.1","9.0.0.alpha5","9.0.0.alpha4","2.7.0","2.7.0.rc1","9.0.0.alpha3","2.7.0.beta1","9.0.0.alpha2","2.7.0.alpha2","9.0.0.alpha1","8.0.0.alpha10","8.0.0.alpha9","8.0.0.alpha8","1.0.15","8.0.0.alpha7","8.0.0.alpha6","8.0.0.alpha5","8.0.0.alpha4","1.0.14","8.0.0.alpha3","2.7.0.alpha1","8.0.0.alpha2","8.0.0.alpha1","2.6.0.rc1","7.0.0.beta1","7.0.0.alpha7","7.0.0.alpha6","2.6.0.beta2","7.0.0.alpha5","7.0.0.alpha4","2.6.0.beta1","7.0.0.alpha3","7.0.0.alpha2","2.6.0.alpha1","7.0.0.alpha1","2.5.0.alpha2","6.0.0.beta1","2.5.0.alpha1","6.0.0.alpha5","6.0.0.alpha4","6.0.0.alpha3","6.0.0.alpha2","6.0.0.alpha1","5.0.0.beta1","2.4.0","5.0.0.alpha1","2.4.0.beta2","2.4.0.beta1","2.4.0.alpha1","2.3.4","2.3.3","4.0.0.beta1","2.3.2","4.0.0.alpha3","2.3.1","4.0.0.alpha2","2.3.0","4.0.0.alpha1","2.3.0.beta3","2.3.0.beta2","3.2.0.alpha7","2.3.0.beta1","3.2.0.alpha6","3.2.0.alpha5","3.2.0.alpha4","2.3.0.alpha1","2.2.0.rc1","3.2.0.alpha3","2.2.0.beta2","3.2.0.alpha2","2.2.0.beta1","3.2.0.alpha1","2.2.0.alpha16","2.2.0.alpha15","2.2.0.alpha14","3.0.0.beta2","2.2.alpha14","3.0.0.beta4","3.0.0.beta3","2.2.0.alpha13","3.0.0.beta1","3.0.0.alpha17","2.2.0.alpha12","2.2.0.alpha11","2.2.0.alpha10","2.2.0.alpha9","2.2.0.alpha8","2.2.0.alpha7","2.2.0.alpha6","2.2.0.alpha5","2.2.0.alpha4","2.2.0.alpha3","2.2.0.alpha2","2.2.0.alpha1","2.1.0.beta3","3.0.0.alpha5","2.1.0.beta1","2.1.0.alpha1","1.0.13","2.0.8","2.0.7","2.0.6","1.0.12","2.0.5","2.0.4","2.0.3","2.0.2","2.0.1","2.0.0","2.0.0.rc3","1.0.11","2.0.0.rc2","2.0.0.rc1","2.0.0.beta2","2.0.0.beta1","2.0.0.alpha5","1.5.0.alpha4","1.5.0.alpha3","1.0.10","1.5.0.alpha2","1.5.0.alpha1","1.0.9","1.0.8","1.3.0.alpha3","1.3.0.alpha2","1.0.7","1.0.6","1.2.0","1.2.0.beta2","1.2.0.beta1","1.2.0.alpha1","1.1.0","1.0.5","1.0.4","1.0.3","1.0.2","1.0.1","1.0.0","10.0.22","14.10.0","14.10.0.beta1","14.10.0.alpha3","14.10.0.alpha2","14.10.0.alpha1","10.0.21","22.0.28","22.0.27","14.9.4","22.0.26","14.9.3","22.0.25","14.9.2","14.9.1","14.9.0","14.9.0.rc1","22.0.24","14.9.0.beta1","14.9.0.alpha1","22.0.23","14.8.17","22.0.22","22.0.21","14.8.16","23.2.0.beta4","10.0.20","14.8.15","22.0.20","23.2.0.alpha3","14.8.14","22.0.18","14.8.13","22.0.17","14.8.12","14.8.11","22.0.16","22.0.15","14.8.10","22.0.14","14.8.9","14.8.8","22.0.13","22.0.12","14.8.7","22.0.11","14.8.6","22.0.10","14.8.5","22.0.9","22.0.8","23.0.0","22.0.7","22.0.6","14.8.4","22.0.5","22.0.4","14.8.3","22.0.3","14.8.2","14.8.1","22.0.2","22.0.1","14.8.0","14.8.0.beta1","22.0.0","22.0.0.rc1","14.8.0.alpha1","22.0.0.beta3","22.0.0.beta2","22.0.0.beta1","22.0.0.alpha9","22.0.0.alpha8","22.0.0.alpha7","22.0.0.alpha6","22.0.0.alpha5","10.0.19","22.0.0.alpha4","14.7.0","22.0.0.alpha3","14.7.0.rc1","22.0.0.alpha2","14.7.0.beta1","22.0.0.alpha1","14.7.0.alpha3","21.0.0.alpha10","21.0.0.alpha9","21.0.0.alpha8","21.0.0.alpha7","14.7.0.alpha2","21.0.0.alpha6","21.0.0.alpha5","10.0.18","21.0.0.alpha4","21.0.0.alpha3","21.0.0.alpha2","21.0.0.alpha1","14.7.0.alpha1","14.6.0.beta2","20.0.0.alpha8","14.6.0.beta1","20.0.0.alpha7","14.6.0.alpha2","20.0.0.alpha6","20.0.0.alpha5","20.0.0.alpha4","14.6.0.alpha1","14.5.0.rc1","20.0.0.alpha3","14.5.0.beta1","19.0.0.beta4","19.0.0.beta3","19.0.0.beta2","19.0.0.beta1","14.5.0.alpha3","14.5.0.alpha2","14.5.0.alpha1","19.0.0.alpha5","19.0.0.alpha4","19.0.0.alpha3","19.0.0.alpha2","19.0.0.alpha1","18.0.0.beta2","18.0.0.beta1","18.0.0.alpha1","14.4.0","14.4.0.rc1","14.4.0.beta2","14.4.0.beta1","14.4.0.alpha1","17.0.0","17.0.0.rc2","17.0.0.rc1","17.0.0.beta3","17.0.0.beta2","17.0.0.beta1","17.0.0.alpha7","17.0.0.alpha6","16.0.1","14.3.0.rc1","14.3.0","14.3.0.beta3","17.0.0.alpha5","14.3.0.beta2","14.3.0.beta1","17.0.0.alpha4","17.0.0.alpha3","17.0.0.alpha2","14.3.0.alpha1","14.2.0","14.2.0.rc1","14.2.0.beta1","16.0.0.alpha3","16.0.0.alpha2","14.2.0.alpha11","16.0.0.alpha1","14.2.0.alpha10","14.2.0.alpha9","14.2.0.alpha8","14.2.0.alpha7","14.2.0.alpha6","15.0.0.rc1","15.0.0","14.2.0.alpha5","14.2.0.alpha4","10.0.17","14.2.0.alpha3","14.2.0.alpha2","14.2.0.alpha1","14.1.2","14.1.1","14.1.0","14.1.0.beta2","14.1.0.beta1","14.1.0.alpha3","14.1.0.alpha1","14.0.2","14.0.1","14.0.0","14.0.0.rc9","14.0.0.rc7","14.0.0.rc6","14.0.0.rc5","14.0.0.rc4","14.0.0.rc3","10.0.16","14.0.0.rc2","14.0.0.rc1","14.0.0.beta3","14.0.0.beta2","10.0.15","14.0.0.beta1","14.0.0.alpha4","10.0.14","10.0.13","14.0.0.alpha3","14.0.0.alpha2","10.0.12","14.0.0.alpha1","10.0.11","13.0.1","13.0.0","13.0.0.beta3","13.0.0.beta2","13.0.0.beta1","13.0.0.alpha4","13.0.0.alpha3","13.0.0.alpha2","10.0.10","13.0.0.alpha1","10.0.9","10.0.8","10.0.7","12.0.0.beta2","12.0.0.beta1","12.0.0.alpha5","12.0.0.alpha4","10.0.6","12.0.0.alpha3","12.0.0.alpha2","12.0.0.alpha1","10.0.5","10.0.4","10.0.3","11.0.0.beta1","11.0.0.alpha1","10.0.2","10.0.1","10.0.0","v22.0.28","v24.0.5","v23.3.12","v10.0.22","v14.10.0","v24.1.0-beta1","v24.1.0-alpha6","v24.1.0-alpha5","v24.1.0-alpha4","v14.10.0-beta1","v23.3.11","v24.0.4","v24.1.0-alpha3","v14.10.0-alpha3","v24.1.0-alpha2","v14.10.0-alpha2","v24.0.3","v23.3.10","v23.3.9","v24.1.0-alpha1","v24.0.2","v23.3.8","v24.0.1","v24.0.0","v23.3.7","v14.10.0-alpha1","v10.0.21","v23.3.6","v23.3.5","v14.9.4","v22.0.27","v23.3.4","v23.3.3","v23.3.2","v22.0.26","v23.3.1","v22.0.25","v14.9.3","v23.3.0","v14.9.2","v22.0.24","v23.3.0-rc1","v23.3.0-beta2","v23.3.0-beta1","v14.9.1","v23.3.0-alpha3","v23.3.0-alpha2","v23.3.0-alpha1","v14.9.0","v14.9.0-rc1","v14.9.0-beta1","v14.9.0-alpha1","v22.0.23","v14.8.17","v23.2.0","v22.0.22","v10.0.20","v22.0.21","v14.8.16","v23.2.0-rc1","v23.2.0-beta4","v23.2.0-beta3","v23.2.0-beta2","v22.0.20","v14.8.15","v23.2.0-beta1","v23.2.0-alpha3","v14.8.14","v22.0.18","v23.2.0-alpha1","v14.8.13","v23.1.0-beta1","v22.0.17","v22.0.16","v14.8.12","v14.8.11","v22.0.15","v14.8.10","v14.8.9","v22.0.14","v23.1.0-alpha4","v23.1.0-alpha3","v14.8.8","v22.0.13","v23.1.0-alpha2","v23.1.0-alpha1","v14.8.7","v22.0.12","v10.0.19","v23.0.0","v22.0.11","v14.8.6","v22.0.10","v22.0.9","v14.8.5","v22.0.8","v22.0.7","v14.8.4","v22.0.6","v22.0.5","v22.0.4","v14.8.3","v14.8.2","v22.0.3","v22.0.2","v14.8.1","v22.0.0-beta3","v14.8.0","v22.0.1","v22.0.0","v14.8.0-beta1","v14.8.0-alpha1","v22.0.0-rc1","v14.7.0-rc1","v22.0.0-beta2","v22.0.0-beta1","v22.0.0-alpha9","v22.0.0-alpha8","v22.0.0-alpha7","v22.0.0-alpha6","v22.0.0-alpha5","v22.0.0-alpha4","v22.0.0-alpha3","v22.0.0-alpha2","v14.7.0-beta1","v22.0.0-alpha1","v14.7.0-alpha3","v14.7.0-alpha2","v21.0.0-alpha10","v21.0.0-alpha0","v21.0.0-alpha9","v21.0.0-alpha8","v21.0.0-alpha7","v21.0.0-alpha6","v21.0.0-alpha5","v21.0.0-alpha4","v10.0.18","v21.0.0-alpha3","v21.0.0-alpha2","v21.0.0-alpha1","v14.7.0-alpha1","v20.0.0-alpha8","v14.6.0-beta2","v20.0.0-alpha7","v14.6.0-beta1","v14.6.0-alpha2","v20.0.0-alpha6","v20.0.0-alpha5","v14.6.0-alpha1","v20.0.0-alpha4","v20.0.0-alpha3","v14.5.0-rc1","v14.5.0-beta1","v20.0.0-alpha2","v20.0.0-alpha1","v14.5.0-alpha3","v19.0.0-beta3","v19.0.0-beta2","v19.0.0-beta1","v19.0.0-alpha5","v14.5.0-alpha2","v10.0.17","v14.5.0-alpha1","v14.4.0","v19.0.0-alpha4","v19.0.0-alpha3","v19.0.0-alpha2","v19.0.0-alpha1","v18.0.0-beta2","v18.0.0-beta1","v18.0.0-alpha1","v17.0.0","v14.4.0-rc1","v14.4.0-beta2","v14.4.0-beta1","v14.4.0-alpha1","v17.0.0-rc1","v14.3.0","v17.0.0-rc2","v17.0.0-beta3","v17.0.0-beta2","v17.0.0-beta1","v17.0.0-alpha7","v17.0.0-alpha6","v17.0.0-alpha5","v14.3.0-rc1","v14.3.0-beta3","v17.0.0-alpha4","v14.3.0-beta2","v14.3.0-beta1","v14.3.0-alpha1","v17.0.0-alpha3","v14.2.0","v17.0.0-alpha2","v17.0.0-alpha1","v16.0.0-alpha3","v14.2.0-rc1","v14.2.0-beta1","v14.2.0-alpha11","v16.0.0-alpha2","v16.0.0-alpha1","v14.2.0-alpha10","v15.0.0-rc1","v14.2.0-alpha9","v14.2.0-alpha8","v14.2.0-alpha7","v14.2.0-alpha6","v14.2.0-alpha5","v15.0.0-beta5","v14.2.0-alpha4","v15.0.0-beta4","v15.0.0-beta3","v15.0.0-beta2","v15.0.0-beta1","v14.2.0-alpha3","v15.0.0-alpha15","v15.0.0-alpha14","v15.0.0-alpha13","v15.0.0-alpha12","v15.0.0-alpha11","v14.2.0-alpha2","v15.0.0-alpha10","v14.2.0-alpha1","v14.1.2","v15.0.0-alpha9","v15.0.0-alpha8","v15.0.0-alpha7","v14.1.1","v15.0.0-alpha6","v15.0.0-alpha5","v14.1.0","v14.1.0-rc1","v15.0.0-alpha4","v14.1.0-beta3","v14.1.0-beta2","v14.1.0-beta1","v15.0.0-alpha3","v14.1.0-alpha5","v15.0.0-alpha2","v14.1.0-alpha4","v14.1.0-alpha3","v14.1.0-alpha2","v15.0.0-alpha1","v14.1.0-alpha1","v14.0.2","v10.0.16","v14.0.1","v14.0.0","v14.0.0-rc9","v14.0.0-rc8","v14.0.0-rc7","v14.0.0-rc6","v14.0.0-rc5","v14.0.0-rc4","v14.0.0-rc3","v14.0.0-rc2","v14.0.0-rc1","v14.0.0-beta3","v14.0.0-beta2","v10.0.15","v14.0.0-beta1","v14.0.0-alpha4","v14.0.0-alpha3","v10.0.14","v10.0.13","v14.0.0-alpha2","v14.0.0-alpha1","v10.0.12","v13.0.1","v10.0.11","v13.0.0","v13.0.0-beta3","v13.0.0-beta2","v10.0.10","v13.0.0-beta1","v13.0.0-alpha4","v13.0.0-alpha3","v13.0.0-alpha2","v13.0.0-alpha1","v10.0.9","v12.0.2","v12.0.1","v12.0.0","v12.0.0-beta2","v10.0.8","v10.0.7","v12.0.0-beta1","v10.0.6","v12.0.0-alpha5","v12.0.0-alpha4","v12.0.0-alpha3","v12.0.0-alpha2","v12.0.0-alpha1","v10.0.5","v10.0.4","v10.0.3","v10.0.2","v11.0.0-beta1","v11.0.0-alpha1","v10.0.1","v10.0.0"],"database_specific":{"vanir_signatures_modified":"2026-09-16T08:29:34Z","vanir_signatures":[{"id":"CVE-2023-25499-87455df4","signature_type":"Line","signature_version":"v1","source":"https://github.com/vaadin/flow/commit/796a4daf95fa8e3480138f303cf8c7ce9ef511f9","target":{"file":"flow-server/src/main/java/com/vaadin/flow/component/internal/UIInternals.java"},"deprecated":false,"digest":{"line_hashes":["227082075483423087327866496384853955075","75099287006273243680904638927908750863","202991083988617148499901974212794488610","175010325297987704677231989228168904209"],"threshold":0.9}},{"target":{"file":"flow-server/src/main/java/com/vaadin/flow/component/internal/UIInternals.java","function":"removePendingInvocation"},"deprecated":false,"digest":{"function_hash":"266664715589818026170143419031316166902","length":248},"id":"CVE-2023-25499-f18b010e","signature_type":"Function","signature_version":"v1","source":"https://github.com/vaadin/flow/commit/796a4daf95fa8e3480138f303cf8c7ce9ef511f9"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25499.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"}]}