GitHub Advisoryadvisory · Maven

GHSA-6hgr-2g6q-3rmc Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19

MEDIUM Published 2021-04-22 Modified 2021-10-08 Official page ↗
Ecosystem
Maven
Packages
com.vaadin:flow-client
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Weaknesses
CWE-287
Reviewed
2021-04-22

Affected packages

• Maven com.vaadin:flow-client: >= 5.0.0, < 6.0.5 → fixed in 6.0.5

Description

`Authentication.logout()` helper in `com.vaadin:flow-client` versions 5.0.0 prior to 6.0.0 (Vaadin 18), and 6.0.0 through 6.0.4 (Vaadin 19.0.0 through 19.0.3) uses incorrect HTTP method, which, in combination with Spring Security CSRF protection, allows local attackers to access Fusion endpoints after the user attempted to log out. • https://vaadin.com/security/cve-2021-31408

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References