En resumen
- CVE-2020-28923 es una vulnerabilidad BAJO (CVSS 2.7) que afecta a com.typesafe.play:play, play framework (lightbend).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.97%, mayor que el 61.9% de las vulnerabilidades.
- Solución: actualizar a 2.8.5 o posterior.
Description
An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON.
NVD description
An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON.
Más vulnerabilidades de com.typesafe.play:play
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free