Data Amplification in Play Framework

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-28923 · ADVISORY
• playframework.com/security/vulnerability · WEB
• playframework.com/security/vulnerability/CVE-2020-28923-ImproperRemovalofSensitiveInformationBeforeStorageorTransfer · WEB

com.typesafe.play:play のその他の脆弱性

• CVE-2020-27196高 7.5An issue was discovered in PlayJava in Play Framework 2.6.0 through 2.8.2. The body parsing of HTTP requests eagerly parses a payload given …
• CVE-2020-26883高 7.5In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents.
• CVE-2020-26882高 7.5In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input.