GHSA-ch48-9r3q-pv7x Vaadin vulnerable to possible information disclosure of class and method names in RPC response

• Maven com.vaadin:flow-server: >= 1.0.0, < 1.0.21 → fixed in 1.0.21 • Maven com.vaadin:flow-server: >= 1.1.0, < 2.9.3 → fixed in 2.9.3 • Maven com.vaadin:flow-server: >= 3.0.0, < 9.1.2 → fixed in 9.1.2 • Maven com.vaadin:flow-server: >= 23.0.0, < 23.3.13 → fixed in 23.3.13 • Maven com.vaadin:flow-server: >= 24.0.0, < 24.0.9 → fixed in 24.0.9 • Maven com.vaadin:flow-server: >= 24.1.alpha1, < 24.1.0 → fixed in 24.1.0 • Maven com.vaadin:vaadin: >= 10.0.0, < 10.0.24 → fixed in 10.0.24 • Maven com.vaadin:vaadin: >= 11.0.0, < 14.10.2 → fixed in 14.10.2 • Maven com.vaadin:vaadin: >= 15.0.0, < 22.1.0 → fixed in 22.1.0 • Maven com.vaadin:vaadin: >= 23.0.0, < 23.3.14 → fixed in 23.3.14 • Maven com.vaadin:vaadin: >= 24.0.0, < 24.0.7 → fixed in 24.0.7 • Maven com.vaadin:vaadin: >= 24.1.0.alpha1, < 24.1.0 → fixed in 24.1.0

Description Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0.rc2, resulting in potential information disclosure of class and method names in RPC responses by sending modified requests. https://vaadin.com/security/cve-2023-25500