Lucene search
GoogleOSV:GHSA-CF8J-64H9-6Q58HistoryAug 18, 2020 - 5:30 p.m.
CSRF in Play Framework
2020-08-1817:30:25
Google
osv.dev
7
0.001 Low
EPSS
Percentile
21.6%
In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can’t be parsed.
References
github.com/playframework/playframework
github.com/playframework/playframework/commit/c82de44fc50b7c58c6e0580f1f67ff08aa7bd154
github.com/playframework/playframework/pull/10285
nvd.nist.gov/vuln/detail/CVE-2020-12480
www.playframework.com/security/vulnerability
www.playframework.com/security/vulnerability/CVE-2020-12480-CsrfBlacklistBypass
Related
github
github
CSRF in Play Framework
2020-08-18 17:30:25
veracode
veracode
Cross-Site Request Forgery (CSRF)
2020-08-20 02:23:11
cvelist
cvelist
CVE-2020-12480
2020-08-17 20:45:28
prion
prion
Cross site request forgery (csrf)
2020-08-17 21:15:00
osv
osv
CVE-2020-12480
2020-08-17 21:15:00
cve
cve
CVE-2020-12480
2020-08-17 21:15:11
nvd
nvd
CVE-2020-12480
2020-08-17 21:15:11