GitHub Advisoryadvisory · Maven

GHSA-mr8h-j9cv-4m8h Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19

MEDIUM Published 2021-04-22 Modified 2021-04-22 Official page ↗
Aliases
CVE-2021-31408
Ecosystem
Maven
Packages
com.vaadin:vaadin-bom
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Weaknesses
CWE-287, CWE-613
Reviewed
2021-04-22

Affected packages

• Maven com.vaadin:vaadin-bom: >= 18.0.0, < 19.0.4 → fixed in 19.0.4

Description

`Authentication.logout()` helper in `com.vaadin:flow-client` versions 5.0.0 prior to 6.0.0 (Vaadin 18), and 6.0.0 through 6.0.4 (Vaadin 19.0.0 through 19.0.3) uses incorrect HTTP method, which, in combination with Spring Security CSRF protection, allows local attackers to access Fusion endpoints after the user attempted to log out. • https://vaadin.com/security/cve-2021-31408

Related

Weakness · not in database (1)

Alias · CVE (1)

  • CVE-2021-31408 Authentication.logout() helper in com.vaadin:flow-client versions 5.0.0 prior to 6.0.0 (Vaadin 18), and 6.0.0 through 6.0.4 (Vaadin 19.0.0… vulnerability

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References