CVE-2014-3630

Mô tả

Tham khảo

• groups.google.com/forum
• groups.google.com/forum
• infocon.org/cons/SyScan/SyScan%202015%20Singapore/SyScan%202015%20Singapore%20presentations/SyScan15%20David%20Jorm%20-%20Finding%20and%20exploiting%20novel%20flaws%20in%20Java%20software.pdf · Issue Tracking
• playframework.com/security/vulnerability/CVE-2014-3630-XmlExternalEntity · Issue Tracking

Lỗ hổng khác của play framework

• CVE-2022-31023CAO 7.5Play Framework is a web framework for Java and Scala. Verions prior to 2.8.16 are vulnerable to generation of error messages containing sens…
• CVE-2022-31018CAO 7.5Play Framework is a web framework for Java and Scala. A denial of service vulnerability has been discovered in verions 2.8.3 through 2.8.15 …
• CVE-2020-28923THẤP 2.7An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplificati…
• CVE-2020-27196CAO 7.5An issue was discovered in PlayJava in Play Framework 2.6.0 through 2.8.2. The body parsing of HTTP requests eagerly parses a payload given …
• CVE-2020-26883CAO 7.5In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents.