En bref
- CVE-2020-28923 est une vulnérabilité FAIBLE (CVSS 2.7) touchant com.typesafe.play:play, play framework (lightbend).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.97%, plus élevée que 61.9% des vulnérabilités.
- Correctif : mettre à jour vers 2.8.5 ou plus récent.
Description
An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON.
NVD description
An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON.
Autres vulnérabilités de com.typesafe.play:play
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free