CVEvulnerability

CVE-2021-33605

4.3 MEDIUM Published 2021-08-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-08-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-754

Description

Improper check in CheckboxGroup in com.vaadin:vaadin-checkbox-flow versions 1.2.0 prior to 2.0.0 (Vaadin 12.0.0 prior to 14.0.0), 2.0.0 prior to 3.0.0 (Vaadin 14.0.0 prior to 14.5.0), 3.0.0 through 4.0.1 (Vaadin 15.0.0 through 17.0.11), 14.5.0 through 14.6.7 (Vaadin 14.5.0 through 14.6.7), and 18.0.0 through 20.0.5 (Vaadin 18.0.0 through 20.0.5) allows attackers to modify the value of a disabled Checkbox inside enabled CheckboxGroup component via unspecified vectors.

Affected configurations

• vaadin vaadin-checkbox-flow (>= 1.2.0 < 2.0.0) • vaadin vaadin-checkbox-flow (>= 2.0.0 < 3.0.0) • vaadin vaadin-checkbox-flow (>= 3.0.0 < 4.0.1) • vaadin vaadin-checkbox-flow (>= 14.5.0 < 14.6.7) • vaadin vaadin-checkbox-flow (>= 18.0.0 < 20.0.5)

Related

Weakness · CWE (1)

  • CWE-754 Improper Check for Unusual or Exceptional Conditions weakness

References