| Package | Affected versions | Patched versions |
|---|---|---|
| com.typesafe.play:play-ws_2.12 | ≥ 2.5.0, < 2.6.24 | 2.6.24 |
| play framework | ≥ 2.5.0, ≤ 2.5.19≥ 2.6.0, ≤ 2.6.23 |
An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23. When configured to make requests using an authenticated HTTP proxy, play-ws may sometimes, typically under high load, when connecting to a target host using https, expose the proxy credentials to the target host.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free