| Package | Affected versions | Patched versions |
|---|---|---|
| com.typesafe.play:play | ≥ 2.8.0, < 2.8.5 | 2.8.5 |
| play framework | ≥ 2.8.0, ≤ 2.8.4 |
An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free