CVE-2020-12480

2020-08-1721:15:00

Google

osv.dev

0.001 Low

EPSS

Percentile

21.6%

JSON

In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can’t be parsed.

CPENameOperatorVersion
playframeworkeq2.6.10
playframeworkeq2.6.22
playframeworkeq2.8.1
playframeworkeq2.7.4
playframeworkeq2.6.6
playframeworkeq2.6.8
playframeworkeq2.7.0
playframeworkeq2.6.13
playframeworkeq2.7.1
playframeworkeq2.6.9

Name	Operator	Version
playframework	eq	2.6.10
playframework	eq	2.6.22
playframework	eq	2.8.1
playframework	eq	2.7.4
playframework	eq	2.6.6
playframework	eq	2.6.8
playframework	eq	2.7.0
playframework	eq	2.6.13
playframework	eq	2.7.1
playframework	eq	2.6.9