Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:24:40 +0000 CVE-2021-31403 — Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8 https://cve.radiocsirt.org/vuln/cve-2021-31403 <p><strong>Affected:</strong> Vaadin, vaadin-server</p> <p>Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:vaadin-server versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 through 7.7.23), and 8.0.0 through 8.12.2 (Vaadin 8.0.0 through 8.12.2) allows attacker to guess a security token via timing attack</p> <p><strong>Affected:</strong> Vaadin, vaadin-server</p> <p>Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:vaadin-server versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 through 7.7.23), and 8.0.0 through 8.12.2 (Vaadin 8.0.0 through 8.12.2) allows attacker to guess a security token via timing attack</p> https://cve.radiocsirt.org/vuln/cve-2021-31403