Data Amplification in Play Framework

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-28923 · ADVISORY
• playframework.com/security/vulnerability · WEB
• playframework.com/security/vulnerability/CVE-2020-28923-ImproperRemovalofSensitiveInformationBeforeStorageorTransfer · WEB

Lỗ hổng khác của com.typesafe.play:play

• CVE-2020-27196CAO 7.5An issue was discovered in PlayJava in Play Framework 2.6.0 through 2.8.2. The body parsing of HTTP requests eagerly parses a payload given …
• CVE-2020-26883CAO 7.5In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents.
• CVE-2020-26882CAO 7.5In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input.