CVE-2011-0509: XSS
Published Jan 20, 2011
·Updated
Cross-site scripting (XSS) vulnerability in Vaadin before 6.4.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the index page.
Affected Software
1 affected component
Vaadin Vaadin<=6.4.8
Event History
Jan 20, 2011
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-0509?
CVE-2011-0509 is classified as a medium severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2011-0509?
To fix CVE-2011-0509, upgrade Vaadin to version 6.4.9 or later.
3
What causes CVE-2011-0509?
CVE-2011-0509 is caused by improper input validation allowing arbitrary web script or HTML injection.
4
Which versions of Vaadin are affected by CVE-2011-0509?
Vaadin versions prior to 6.4.9 are affected by CVE-2011-0509.
5
Is CVE-2011-0509 a critical vulnerability?
No, CVE-2011-0509 is not considered a critical vulnerability, but it can lead to significant security issues.